)]}'
{
  "log": [
    {
      "commit": "3add82bfd87e6cca19618e72ad31729620bb0955",
      "tree": "1abaa6f8d8380d6ceeaa514718dea8f7e7b0fc9d",
      "parents": [
        "fd74114a207d0cf446593d8050896ac5dcef61cb",
        "04bf26fab15356840bcfb09dbf7b219751a4fd35"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Tue Sep 01 09:02:19 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Sep 01 09:02:19 2026 +0100"
      },
      "message": "Merge pull request #83 from apache/coheigea/group-codeql\n\nGroup codeql updates"
    },
    {
      "commit": "04bf26fab15356840bcfb09dbf7b219751a4fd35",
      "tree": "1abaa6f8d8380d6ceeaa514718dea8f7e7b0fc9d",
      "parents": [
        "fd74114a207d0cf446593d8050896ac5dcef61cb"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Tue Sep 01 08:22:43 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Tue Sep 01 08:22:43 2026 +0100"
      },
      "message": "Group codeql updates\n"
    },
    {
      "commit": "fd74114a207d0cf446593d8050896ac5dcef61cb",
      "tree": "afffc0f6a1c3ba2cca36090542f8cc86c57d2115",
      "parents": [
        "467997b928ec6778339260d19ff4f26bd1befc5a",
        "0ffb8039bf52300a7ba42815426a2d6fec219fcd"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Tue Sep 01 07:56:18 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Sep 01 07:56:18 2026 +0100"
      },
      "message": "Merge pull request #82 from apache/dependabot/github_actions/github/codeql-action/analyze-4.37.9\n\nBump github/codeql-action/analyze from 4.37.8 to 4.37.9"
    },
    {
      "commit": "467997b928ec6778339260d19ff4f26bd1befc5a",
      "tree": "233b6039b52ce3b4c2896a1a871821c87ee17a8b",
      "parents": [
        "7499a685646852fa22ad51b34631e6b0e6aa7f90",
        "cfbe79ee0fac87b7c23205ba14dfbb290449016e"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Tue Sep 01 07:55:51 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Sep 01 07:55:51 2026 +0100"
      },
      "message": "Merge pull request #81 from apache/dependabot/github_actions/github/codeql-action/init-4.37.9\n\nBump github/codeql-action/init from 4.37.8 to 4.37.9"
    },
    {
      "commit": "7499a685646852fa22ad51b34631e6b0e6aa7f90",
      "tree": "35bc6ce057a0985420190648103d1641f1b12aee",
      "parents": [
        "0e879e156ef91fefb00e644594ae4bb1e215ee71",
        "c95acbbd3f7ebee796aac9369f7a8c3f9625a97f"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Tue Sep 01 07:55:29 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Sep 01 07:55:29 2026 +0100"
      },
      "message": "Merge pull request #80 from apache/dependabot/github_actions/actions/setup-java-6.0.0\n\nBump actions/setup-java from 5.7.0 to 6.0.0"
    },
    {
      "commit": "0ffb8039bf52300a7ba42815426a2d6fec219fcd",
      "tree": "3c22ac58cb93e78df872915c2014db1fd9181130",
      "parents": [
        "0e879e156ef91fefb00e644594ae4bb1e215ee71"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Aug 31 17:15:51 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Aug 31 17:15:51 2026 +0000"
      },
      "message": "Bump github/codeql-action/analyze from 4.37.8 to 4.37.9\n\nBumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.37.8 to 4.37.9.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...cdf488f595d80d6e07e03d4674febd5ab45fa938)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/analyze\n  dependency-version: 4.37.9\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "cfbe79ee0fac87b7c23205ba14dfbb290449016e",
      "tree": "96ea5563782c003d08d8ea9d6538566e9eb4192a",
      "parents": [
        "0e879e156ef91fefb00e644594ae4bb1e215ee71"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Aug 31 17:15:03 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Aug 31 17:15:03 2026 +0000"
      },
      "message": "Bump github/codeql-action/init from 4.37.8 to 4.37.9\n\nBumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.8 to 4.37.9.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28...cdf488f595d80d6e07e03d4674febd5ab45fa938)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/init\n  dependency-version: 4.37.9\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "c95acbbd3f7ebee796aac9369f7a8c3f9625a97f",
      "tree": "35bc6ce057a0985420190648103d1641f1b12aee",
      "parents": [
        "0e879e156ef91fefb00e644594ae4bb1e215ee71"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Aug 31 17:14:15 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Aug 31 17:14:15 2026 +0000"
      },
      "message": "Bump actions/setup-java from 5.7.0 to 6.0.0\n\nBumps [actions/setup-java](https://github.com/actions/setup-java) from 5.7.0 to 6.0.0.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/b6effb05e454b25005698d916606bdc6ffcbf961...dd06d9cba3e5552c54d9f8ea23572deb30010f7c)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-java\n  dependency-version: 6.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "0e879e156ef91fefb00e644594ae4bb1e215ee71",
      "tree": "cac5cc87e92b83895137fc7bb0776f9946e6b600",
      "parents": [
        "e51c750ec95d337ddd0ae7b525b20fa42b0ce173",
        "3e812aca947f2f47da411f6d939d5966b75b6771"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Thu Aug 27 08:54:06 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Aug 27 08:54:06 2026 +0100"
      },
      "message": "Merge pull request #79 from apache/dependabot/github_actions/github/codeql-action/analyze-4.37.8\n\nBump github/codeql-action/analyze from 4.37.7 to 4.37.8"
    },
    {
      "commit": "e51c750ec95d337ddd0ae7b525b20fa42b0ce173",
      "tree": "c28daab0948d8dbacb3f6e3d0fd5f529d1c18336",
      "parents": [
        "3d7ee6ad52ca703eeec5abd0743f1fd6b0aebae4",
        "d5f236b358aeb57de64e6e8345c16076ad4ede5c"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Thu Aug 27 08:53:57 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Aug 27 08:53:57 2026 +0100"
      },
      "message": "Merge pull request #78 from apache/dependabot/github_actions/github/codeql-action/init-4.37.8\n\nBump github/codeql-action/init from 4.37.7 to 4.37.8"
    },
    {
      "commit": "3e812aca947f2f47da411f6d939d5966b75b6771",
      "tree": "cf692185fdfe775c17ffa639c3d313de29f2b194",
      "parents": [
        "3d7ee6ad52ca703eeec5abd0743f1fd6b0aebae4"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Aug 26 17:16:30 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Aug 26 17:16:30 2026 +0000"
      },
      "message": "Bump github/codeql-action/analyze from 4.37.7 to 4.37.8\n\nBumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.37.7 to 4.37.8.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/analyze\n  dependency-version: 4.37.8\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "d5f236b358aeb57de64e6e8345c16076ad4ede5c",
      "tree": "c28daab0948d8dbacb3f6e3d0fd5f529d1c18336",
      "parents": [
        "3d7ee6ad52ca703eeec5abd0743f1fd6b0aebae4"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Aug 26 17:15:22 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Aug 26 17:15:22 2026 +0000"
      },
      "message": "Bump github/codeql-action/init from 4.37.7 to 4.37.8\n\nBumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.7 to 4.37.8.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/init\n  dependency-version: 4.37.8\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "3d7ee6ad52ca703eeec5abd0743f1fd6b0aebae4",
      "tree": "809800537b6666805479be9dc31e5bdf5796b00f",
      "parents": [
        "e145fc756c5ecff0c62d4b0d411203679766d6d8",
        "1ee3cbe77920ea432c6d8eb0f0bb8618d112f505"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Fri Aug 21 07:06:23 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Aug 21 07:06:23 2026 +0100"
      },
      "message": "Merge pull request #77 from apache/coheigea/policy-isolation\n\nIsolate downloaded policies from the main registry"
    },
    {
      "commit": "1ee3cbe77920ea432c6d8eb0f0bb8618d112f505",
      "tree": "809800537b6666805479be9dc31e5bdf5796b00f",
      "parents": [
        "e145fc756c5ecff0c62d4b0d411203679766d6d8"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Fri Aug 21 07:02:44 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Fri Aug 21 07:02:44 2026 +0100"
      },
      "message": "Isolate downloaded policies from the main registry\n"
    },
    {
      "commit": "e145fc756c5ecff0c62d4b0d411203679766d6d8",
      "tree": "a0ef9eff40528e022417cefaf71a168f7d344c3b",
      "parents": [
        "882b5fce36e6156536b4852baeb39809171e6a07",
        "b6bd67ce1f510899b19afaf574d4522639a60b4c"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Fri Aug 21 06:56:25 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Aug 21 06:56:25 2026 +0100"
      },
      "message": "Merge pull request #76 from apache/coheigea/ipv6\n\nAlso exclude some IPv6 addresses"
    },
    {
      "commit": "b6bd67ce1f510899b19afaf574d4522639a60b4c",
      "tree": "a0ef9eff40528e022417cefaf71a168f7d344c3b",
      "parents": [
        "882b5fce36e6156536b4852baeb39809171e6a07"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Fri Aug 21 06:53:57 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Fri Aug 21 06:53:57 2026 +0100"
      },
      "message": "Also exclude some IPv6 addresses\n"
    },
    {
      "commit": "882b5fce36e6156536b4852baeb39809171e6a07",
      "tree": "29169997258fbbb3362ebedb91a578bd95f0269f",
      "parents": [
        "95aa2504e58fdb6dc4d78e0e4558889394eefde6",
        "3435acf9f346784ca5840e28366fefd6435c3da6"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Fri Aug 21 06:44:43 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Aug 21 06:44:43 2026 +0100"
      },
      "message": "Merge pull request #75 from apache/coheigea/reference-pinning\n\nCheck all DNS entries for the host to see if they are allowed and pin…"
    },
    {
      "commit": "3435acf9f346784ca5840e28366fefd6435c3da6",
      "tree": "29169997258fbbb3362ebedb91a578bd95f0269f",
      "parents": [
        "95aa2504e58fdb6dc4d78e0e4558889394eefde6"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Fri Aug 21 06:41:30 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Fri Aug 21 06:41:30 2026 +0100"
      },
      "message": "Check all DNS entries for the host to see if they are allowed and pin the address used\n"
    },
    {
      "commit": "95aa2504e58fdb6dc4d78e0e4558889394eefde6",
      "tree": "0c11127d6065cacec1754934aabc9991ec687782",
      "parents": [
        "0e180aaa428d8a179df81678c5bfc99458abca40",
        "a767decb7422bba5f3e452b100341f3f9c232dee"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Fri Aug 21 06:27:26 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Aug 21 06:27:26 2026 +0100"
      },
      "message": "Merge pull request #73 from apache/coheigea/policy-reference-timeout\n\nAdd a bound on the maximum total time allowed to fetch a remote polic…"
    },
    {
      "commit": "a767decb7422bba5f3e452b100341f3f9c232dee",
      "tree": "0c11127d6065cacec1754934aabc9991ec687782",
      "parents": [
        "0e180aaa428d8a179df81678c5bfc99458abca40"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Thu Aug 20 16:52:20 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Thu Aug 20 16:53:02 2026 +0100"
      },
      "message": "Add a bound on the maximum total time allowed to fetch a remote policy document through `PolicyReference`\n"
    },
    {
      "commit": "0e180aaa428d8a179df81678c5bfc99458abca40",
      "tree": "31de49eb6081ae54eae1e1c1f405cc49103f4ee8",
      "parents": [
        "97e7911f4f1e55bb4e249d8949133ed2d19713e7",
        "754397ee7309c48b3692af931efe349a0f31f11f"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Thu Aug 20 16:16:14 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Aug 20 16:16:14 2026 +0100"
      },
      "message": "Merge pull request #72 from apache/coheigea/subtree-budget\n\nAdding subtree budget"
    },
    {
      "commit": "754397ee7309c48b3692af931efe349a0f31f11f",
      "tree": "31de49eb6081ae54eae1e1c1f405cc49103f4ee8",
      "parents": [
        "97e7911f4f1e55bb4e249d8949133ed2d19713e7"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Thu Aug 20 15:49:57 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Thu Aug 20 15:49:57 2026 +0100"
      },
      "message": "Adding subtree budget\n"
    },
    {
      "commit": "97e7911f4f1e55bb4e249d8949133ed2d19713e7",
      "tree": "77a68ef4b34e802543d31419f28ce3f4193a9246",
      "parents": [
        "9861426792a5635982312e57947791b26f696284",
        "5f6e31657326e7272933427424b9316f12d26147"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Thu Aug 20 10:37:10 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Aug 20 10:37:10 2026 +0100"
      },
      "message": "Merge pull request #71 from apache/coheigea/intersection\n\nAdding policy intersection budget"
    },
    {
      "commit": "5f6e31657326e7272933427424b9316f12d26147",
      "tree": "77a68ef4b34e802543d31419f28ce3f4193a9246",
      "parents": [
        "9861426792a5635982312e57947791b26f696284"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Thu Aug 20 10:29:56 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Thu Aug 20 10:32:37 2026 +0100"
      },
      "message": "Adding policy intersection budget\n"
    },
    {
      "commit": "9861426792a5635982312e57947791b26f696284",
      "tree": "7db589f0f5df92b09afd47263569f9160558e54c",
      "parents": [
        "032fcc3ef6b720715ba3743476d42c10dce0f0f0",
        "a577368ac7c626e5fea21314b019e074b4f1e68c"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Thu Aug 20 09:49:12 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Aug 20 09:49:12 2026 +0100"
      },
      "message": "Merge pull request #70 from apache/coheigea/policy-comparator-budget\n\nAdding a policy comparator budget"
    },
    {
      "commit": "a577368ac7c626e5fea21314b019e074b4f1e68c",
      "tree": "7db589f0f5df92b09afd47263569f9160558e54c",
      "parents": [
        "032fcc3ef6b720715ba3743476d42c10dce0f0f0"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Thu Aug 20 09:33:37 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Thu Aug 20 09:33:37 2026 +0100"
      },
      "message": "Adding a policy comparator budget\n"
    },
    {
      "commit": "032fcc3ef6b720715ba3743476d42c10dce0f0f0",
      "tree": "3531d64d0edf5720c91b867e18b7bd80c21e368c",
      "parents": [
        "0d4c467f6393ded32909ed7163af1e8bc00e9d80",
        "efaf37d4c5f5a866bd724145017404cd38f7fbda"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Wed Aug 19 19:04:26 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Aug 19 19:04:26 2026 +0100"
      },
      "message": "Merge pull request #69 from apache/coheigea/threat-model-normalize\n\nUpdating the threat model with the policy normalize behaviour"
    },
    {
      "commit": "efaf37d4c5f5a866bd724145017404cd38f7fbda",
      "tree": "3531d64d0edf5720c91b867e18b7bd80c21e368c",
      "parents": [
        "0d4c467f6393ded32909ed7163af1e8bc00e9d80"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Wed Aug 19 16:13:44 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Wed Aug 19 16:13:44 2026 +0100"
      },
      "message": "Updating the threat model with the policy normalize behaviour\n"
    },
    {
      "commit": "0d4c467f6393ded32909ed7163af1e8bc00e9d80",
      "tree": "9d99db4ac92eab7538e5fc2a93348c2091f73746",
      "parents": [
        "6bf2ff486a2bae8ed8b1c6e03093e4a0059e9ae1",
        "d63930bee2244cfca5c09f58f9c056393e550b2f"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Wed Aug 19 14:36:42 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Aug 19 14:36:42 2026 +0100"
      },
      "message": "Merge pull request #68 from apache/coheigea/alternative-cap\n\nAdd a cap on max normalized components"
    },
    {
      "commit": "d63930bee2244cfca5c09f58f9c056393e550b2f",
      "tree": "9d99db4ac92eab7538e5fc2a93348c2091f73746",
      "parents": [
        "6bf2ff486a2bae8ed8b1c6e03093e4a0059e9ae1"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Wed Aug 19 11:26:55 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Wed Aug 19 11:26:55 2026 +0100"
      },
      "message": "Add a cap on max normalized components\n"
    },
    {
      "commit": "6bf2ff486a2bae8ed8b1c6e03093e4a0059e9ae1",
      "tree": "2ac5ce943f614fa51c9e07b322eb74b04c712909",
      "parents": [
        "74b3bbee611d7238b9db9a8c896a6afeed99b711",
        "dfcbf599f7a5fa63a9dbb71f84bcf6ba67a369f0"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Wed Aug 19 11:11:35 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Aug 19 11:11:35 2026 +0100"
      },
      "message": "Merge pull request #67 from apache/coheigea/reference-expansions\n\nPut limit on reference expansions"
    },
    {
      "commit": "74b3bbee611d7238b9db9a8c896a6afeed99b711",
      "tree": "897d243bb91344ac6622b47ef108e1413515c696",
      "parents": [
        "5fdc360b04c13e69821f4557b4b630db6a52ad0d",
        "d21f0a79a365b2c965016d7761bd9b5343439b5e"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Wed Aug 19 11:05:50 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Aug 19 11:05:50 2026 +0100"
      },
      "message": "Merge pull request #66 from apache/coheigea/public-parser\n\nFixing recursion case for nested policy"
    },
    {
      "commit": "dfcbf599f7a5fa63a9dbb71f84bcf6ba67a369f0",
      "tree": "cc536fe4b36c1b148808a0ddc00a125c29838198",
      "parents": [
        "5fdc360b04c13e69821f4557b4b630db6a52ad0d"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Wed Aug 19 09:28:11 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Wed Aug 19 09:28:48 2026 +0100"
      },
      "message": "Put limit on reference expansions\n"
    },
    {
      "commit": "d21f0a79a365b2c965016d7761bd9b5343439b5e",
      "tree": "897d243bb91344ac6622b47ef108e1413515c696",
      "parents": [
        "5fdc360b04c13e69821f4557b4b630db6a52ad0d"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Wed Aug 19 09:17:20 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Wed Aug 19 09:17:20 2026 +0100"
      },
      "message": "Fixing recursion case for nested policy\n"
    },
    {
      "commit": "5fdc360b04c13e69821f4557b4b630db6a52ad0d",
      "tree": "f3e2cf236a8e31ebd5dd2cc1c7220f0e5a07dc87",
      "parents": [
        "0bb9232172a322c5d4cac9f4aae78fb67f8c60c0",
        "083e548016d54d32414ef84e9aa42ee684039fb6"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Wed Aug 19 08:19:34 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Aug 19 08:19:34 2026 +0100"
      },
      "message": "Merge pull request #64 from apache/dependabot/github_actions/github/codeql-action/analyze-4.37.7\n\nBump github/codeql-action/analyze from 4.37.6 to 4.37.7"
    },
    {
      "commit": "0bb9232172a322c5d4cac9f4aae78fb67f8c60c0",
      "tree": "a74b018c8366ad4071d7f77066a0b83331427cc2",
      "parents": [
        "599918a0edaa87059e6bfaa82468eb662baeb742",
        "739062e9946ac8b9f467da2ca27a4ea994d7b2c4"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Wed Aug 19 08:19:25 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Aug 19 08:19:25 2026 +0100"
      },
      "message": "Merge pull request #65 from apache/dependabot/github_actions/github/codeql-action/init-4.37.7\n\nBump github/codeql-action/init from 4.37.6 to 4.37.7"
    },
    {
      "commit": "739062e9946ac8b9f467da2ca27a4ea994d7b2c4",
      "tree": "a74b018c8366ad4071d7f77066a0b83331427cc2",
      "parents": [
        "599918a0edaa87059e6bfaa82468eb662baeb742"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Aug 18 17:23:58 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Aug 18 17:23:58 2026 +0000"
      },
      "message": "Bump github/codeql-action/init from 4.37.6 to 4.37.7\n\nBumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.6 to 4.37.7.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/5595ccaf912efad79be6eef63a5619ff05969be3...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/init\n  dependency-version: 4.37.7\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "083e548016d54d32414ef84e9aa42ee684039fb6",
      "tree": "0405d172b12c3850926eea994f336c6d6a4c3666",
      "parents": [
        "599918a0edaa87059e6bfaa82468eb662baeb742"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Aug 18 17:22:44 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Aug 18 17:22:44 2026 +0000"
      },
      "message": "Bump github/codeql-action/analyze from 4.37.6 to 4.37.7\n\nBumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.37.6 to 4.37.7.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/5595ccaf912efad79be6eef63a5619ff05969be3...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/analyze\n  dependency-version: 4.37.7\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "599918a0edaa87059e6bfaa82468eb662baeb742",
      "tree": "b68f2f640ef777877ea2c152d4bce4826bfe49aa",
      "parents": [
        "6b578a85d1c06c51b8605d2c0e2624b731fbbc73",
        "90af0b69219a932f1d66edd345d6f239d1a7220d"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Tue Aug 11 09:46:12 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Aug 11 09:46:12 2026 +0100"
      },
      "message": "Merge pull request #62 from apache/dependabot/github_actions/github/codeql-action/init-4.37.6\n\nBump github/codeql-action/init from 4.37.4 to 4.37.6"
    },
    {
      "commit": "6b578a85d1c06c51b8605d2c0e2624b731fbbc73",
      "tree": "318aa5eb4c5288573d423b264e147cf3c8bca6a2",
      "parents": [
        "a8f72c7be8d0705650b7c5e7ad70670bbc85f7ec",
        "5402d040b0258d4aef79cad256c7965489445e84"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Tue Aug 11 09:46:00 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Aug 11 09:46:00 2026 +0100"
      },
      "message": "Merge pull request #63 from apache/dependabot/github_actions/github/codeql-action/analyze-4.37.6\n\nBump github/codeql-action/analyze from 4.37.4 to 4.37.6"
    },
    {
      "commit": "5402d040b0258d4aef79cad256c7965489445e84",
      "tree": "318aa5eb4c5288573d423b264e147cf3c8bca6a2",
      "parents": [
        "a8f72c7be8d0705650b7c5e7ad70670bbc85f7ec"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Aug 10 17:16:45 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Aug 10 17:16:45 2026 +0000"
      },
      "message": "Bump github/codeql-action/analyze from 4.37.4 to 4.37.6\n\nBumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.37.4 to 4.37.6.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/f205ea1c3313d32999d8d6a48b4f6530d4437b38...5595ccaf912efad79be6eef63a5619ff05969be3)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/analyze\n  dependency-version: 4.37.6\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "90af0b69219a932f1d66edd345d6f239d1a7220d",
      "tree": "c013bf3e0d38f1c67ec1f7c463c10c8c583efd2c",
      "parents": [
        "a8f72c7be8d0705650b7c5e7ad70670bbc85f7ec"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Aug 10 17:15:28 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Aug 10 17:15:28 2026 +0000"
      },
      "message": "Bump github/codeql-action/init from 4.37.4 to 4.37.6\n\nBumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.4 to 4.37.6.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/f205ea1c3313d32999d8d6a48b4f6530d4437b38...5595ccaf912efad79be6eef63a5619ff05969be3)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/init\n  dependency-version: 4.37.6\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "a8f72c7be8d0705650b7c5e7ad70670bbc85f7ec",
      "tree": "65b444e33e7e3a035d3ca9927838fa4060338e7a",
      "parents": [
        "234d101b75c5a5a9590df6a3e5f21aab1fb1645e"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Mon Aug 10 16:48:24 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Mon Aug 10 16:48:24 2026 +0100"
      },
      "message": "Switch to pin GitHub actions\n"
    },
    {
      "commit": "234d101b75c5a5a9590df6a3e5f21aab1fb1645e",
      "tree": "066cd98159a265d6fe63dbdd678091ef276104d0",
      "parents": [
        "863f2f4dec3a4eeb3666cd4865e9413ef696b912",
        "8cce36d6245dc6ca3a64c40d1da95eb63273077e"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Fri Aug 07 10:09:40 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Aug 07 10:09:40 2026 +0100"
      },
      "message": "Merge pull request #61 from apache/dependabot/github_actions/actions/setup-java-5.7.0\n\nBump actions/setup-java from 5.6.0 to 5.7.0"
    },
    {
      "commit": "863f2f4dec3a4eeb3666cd4865e9413ef696b912",
      "tree": "943cc19e3d8d8782cdacc565fd9239fbdec3c387",
      "parents": [
        "e0327d9d4403ee22969823d64d2b94f99e854ac9",
        "540d2be2af41a5b6d4c17056dec3ec2c58c81e04"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Fri Aug 07 10:09:31 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Aug 07 10:09:31 2026 +0100"
      },
      "message": "Merge pull request #60 from apache/dependabot/github_actions/github/codeql-action-4.37.4\n\nBump github/codeql-action from 4.37.3 to 4.37.4"
    },
    {
      "commit": "8cce36d6245dc6ca3a64c40d1da95eb63273077e",
      "tree": "108d3db055b04aeeedbe24cf49be44302632d9a3",
      "parents": [
        "e0327d9d4403ee22969823d64d2b94f99e854ac9"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Aug 05 17:20:31 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Aug 05 17:20:31 2026 +0000"
      },
      "message": "Bump actions/setup-java from 5.6.0 to 5.7.0\n\nBumps [actions/setup-java](https://github.com/actions/setup-java) from 5.6.0 to 5.7.0.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/v5.6.0...v5.7.0)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-java\n  dependency-version: 5.7.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "540d2be2af41a5b6d4c17056dec3ec2c58c81e04",
      "tree": "943cc19e3d8d8782cdacc565fd9239fbdec3c387",
      "parents": [
        "e0327d9d4403ee22969823d64d2b94f99e854ac9"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Aug 04 17:47:16 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Aug 04 17:47:16 2026 +0000"
      },
      "message": "Bump github/codeql-action from 4.37.3 to 4.37.4\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.3 to 4.37.4.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/v4.37.3...v4.37.4)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n  dependency-version: 4.37.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "e0327d9d4403ee22969823d64d2b94f99e854ac9",
      "tree": "6a0067b67d4bf55602f2dcea42f3ac4f011315e2",
      "parents": [
        "52a1c168b156f3ad16fed10fdc0eed1d9f0fed5a",
        "25f93f7ce158e8bc8735cf546c1e979002a21793"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Tue Jul 28 14:59:41 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 28 14:59:41 2026 +0100"
      },
      "message": "Merge pull request #59 from apache/dependabot/github_actions/github/codeql-action-4.37.3\n\nBump github/codeql-action from 4.37.1 to 4.37.3"
    },
    {
      "commit": "25f93f7ce158e8bc8735cf546c1e979002a21793",
      "tree": "6a0067b67d4bf55602f2dcea42f3ac4f011315e2",
      "parents": [
        "52a1c168b156f3ad16fed10fdc0eed1d9f0fed5a"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 18:04:43 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 18:04:43 2026 +0000"
      },
      "message": "Bump github/codeql-action from 4.37.1 to 4.37.3\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.1 to 4.37.3.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/v4.37.1...v4.37.3)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n  dependency-version: 4.37.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "52a1c168b156f3ad16fed10fdc0eed1d9f0fed5a",
      "tree": "9164d1892ae3ffd507e3cbc07a586b34023975a1",
      "parents": [
        "20d34b91e60d04c990d8cdd38fa390176c10b27c"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Fri Jul 24 12:04:54 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Fri Jul 24 12:04:54 2026 +0100"
      },
      "message": "Updating website for 3.2.3 release\n"
    },
    {
      "commit": "20d34b91e60d04c990d8cdd38fa390176c10b27c",
      "tree": "93a6027da149ed351ef3fc404f377b516eec8e68",
      "parents": [
        "890d7d162ec683f5d84b436d1b0905cd75569eae",
        "523b5ce02b6deeb18160aa4abea6cb8e3115bd17"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Wed Jul 22 09:03:48 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Jul 22 09:03:48 2026 +0100"
      },
      "message": "Merge pull request #58 from apache/dependabot/github_actions/github/codeql-action-4.37.1\n\nBump github/codeql-action from 4.37.0 to 4.37.1"
    },
    {
      "commit": "523b5ce02b6deeb18160aa4abea6cb8e3115bd17",
      "tree": "93a6027da149ed351ef3fc404f377b516eec8e68",
      "parents": [
        "890d7d162ec683f5d84b436d1b0905cd75569eae"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 21 17:14:03 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 21 17:14:03 2026 +0000"
      },
      "message": "Bump github/codeql-action from 4.37.0 to 4.37.1\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.0 to 4.37.1.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/v4.37.0...v4.37.1)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n  dependency-version: 4.37.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "890d7d162ec683f5d84b436d1b0905cd75569eae",
      "tree": "ce877ae8716440c9c8fb9170b36447d5f14e2ae4",
      "parents": [
        "a1300b3da80ee1f242f928ec0aaf5fc06845beaf"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Tue Jul 21 09:29:40 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Tue Jul 21 09:29:40 2026 +0100"
      },
      "message": "[maven-release-plugin] prepare for next development iteration\n"
    },
    {
      "commit": "a1300b3da80ee1f242f928ec0aaf5fc06845beaf",
      "tree": "f68657dc18c9e9b6fbfd9d7daa27f23ade69fe28",
      "parents": [
        "d2690a702b88727e9b5b8cd97d6dcbdb31e76de2"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Tue Jul 21 09:29:26 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Tue Jul 21 09:29:26 2026 +0100"
      },
      "message": "[maven-release-plugin] prepare release neethi-3.2.3\n"
    },
    {
      "commit": "d2690a702b88727e9b5b8cd97d6dcbdb31e76de2",
      "tree": "c9cfd634580abacbfdabcd66f8a6e2ce105e497d",
      "parents": [
        "3cb5e116141c7a524d602c6a92312c479229661d",
        "66aa6fc658d216a78cb861be96220cb65a97cb18"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Tue Jul 21 09:00:35 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 21 09:00:35 2026 +0100"
      },
      "message": "Merge pull request #57 from apache/dependabot/github_actions/actions/setup-java-5.6.0\n\nBump actions/setup-java from 5.4.0 to 5.6.0"
    },
    {
      "commit": "3cb5e116141c7a524d602c6a92312c479229661d",
      "tree": "d751c15c7e85776ed35580a96de90794a5a0fa08",
      "parents": [
        "a26db28f69f17ced958753d3b41b2314234908a8",
        "c9b4b9267040c8e4c939ba18e6a17e77265a3803"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Tue Jul 21 09:00:23 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 21 09:00:23 2026 +0100"
      },
      "message": "Merge pull request #55 from apache/dependabot/github_actions/github/codeql-action-4.37.0\n\nBump github/codeql-action from 4.36.3 to 4.37.0"
    },
    {
      "commit": "66aa6fc658d216a78cb861be96220cb65a97cb18",
      "tree": "6a61ac85b4b47148b23a5fc3c31be1c86c08dfd4",
      "parents": [
        "a26db28f69f17ced958753d3b41b2314234908a8"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 20 17:22:23 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 20 17:22:23 2026 +0000"
      },
      "message": "Bump actions/setup-java from 5.4.0 to 5.6.0\n\nBumps [actions/setup-java](https://github.com/actions/setup-java) from 5.4.0 to 5.6.0.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/v5.4.0...v5.6.0)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-java\n  dependency-version: 5.6.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "a26db28f69f17ced958753d3b41b2314234908a8",
      "tree": "a2865c66d82e9095a1d215896361fca2b54b1700",
      "parents": [
        "58558a1fb30fd713e96a687de57d7918a1c8771e",
        "eca5ee21b3358da9cdb8b227879fb70bd57326fe"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Mon Jul 20 13:19:36 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 20 13:19:36 2026 +0100"
      },
      "message": "Merge pull request #56 from potiuk/asf-security/threat-model-2026-07-20\n\nWire the security threat model for agent discoverability (AGENTS.md + SECURITY.md)"
    },
    {
      "commit": "eca5ee21b3358da9cdb8b227879fb70bd57326fe",
      "tree": "a2865c66d82e9095a1d215896361fca2b54b1700",
      "parents": [
        "58558a1fb30fd713e96a687de57d7918a1c8771e"
      ],
      "author": {
        "name": "Jarek Potiuk",
        "email": "jarek@potiuk.com",
        "time": "Mon Jul 20 14:17:58 2026 +0200"
      },
      "committer": {
        "name": "Jarek Potiuk",
        "email": "jarek@potiuk.com",
        "time": "Mon Jul 20 14:17:58 2026 +0200"
      },
      "message": "Wire the security threat model for agent discoverability (AGENTS.md + SECURITY.md)\n\nGenerated-by: Claude Code\n"
    },
    {
      "commit": "c9b4b9267040c8e4c939ba18e6a17e77265a3803",
      "tree": "15788fb2635a17f988f967452f246eb665897385",
      "parents": [
        "58558a1fb30fd713e96a687de57d7918a1c8771e"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 13 17:15:53 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 13 17:15:53 2026 +0000"
      },
      "message": "Bump github/codeql-action from 4.36.3 to 4.37.0\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.36.3 to 4.37.0.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/v4.36.3...v4.37.0)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n  dependency-version: 4.37.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "58558a1fb30fd713e96a687de57d7918a1c8771e",
      "tree": "6f371b7e9cd9b5f4ec059d633d8382ad989edb25",
      "parents": [
        "63c2a593064ef882597905e52d77709cd758cf76",
        "18055e1c795488016e3e3972426d0d71a7afd922"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Fri Jul 10 12:03:41 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 10 12:03:41 2026 +0100"
      },
      "message": "Merge pull request #53 from apache/coheigea/threat-model\n\nUpdate threat model and remove draft"
    },
    {
      "commit": "18055e1c795488016e3e3972426d0d71a7afd922",
      "tree": "6f371b7e9cd9b5f4ec059d633d8382ad989edb25",
      "parents": [
        "63c2a593064ef882597905e52d77709cd758cf76"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Fri Jul 10 11:53:24 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Fri Jul 10 11:53:24 2026 +0100"
      },
      "message": "Update threat model and remove draft\n"
    },
    {
      "commit": "63c2a593064ef882597905e52d77709cd758cf76",
      "tree": "d80f2c1c89ad4609623c393622191f73990ca449",
      "parents": [
        "c28789c60f41cae7bc542d86a735eac9c1d9f0cc",
        "113d7845c381bdb190e21962870ecfe3ad8478b2"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Fri Jul 10 11:50:04 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 10 11:50:04 2026 +0100"
      },
      "message": "Merge pull request #52 from apache/coheigea/policy-containing-primitive\n\nPolicy Containing Primitive fix"
    },
    {
      "commit": "c28789c60f41cae7bc542d86a735eac9c1d9f0cc",
      "tree": "2fd59739eae10bda62ab9d9d56a363a55c07f559",
      "parents": [
        "bbd6eb82d7b97c35b887a19e55d887cbeed0ce17",
        "f001b5aaea81a040f13b2480ea09871feb357cdd"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Fri Jul 10 11:47:23 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 10 11:47:23 2026 +0100"
      },
      "message": "Merge pull request #32 from potiuk/asf-security/draft-threat-model-2026-05-30\n\nAdd draft project security threat-model document"
    },
    {
      "commit": "113d7845c381bdb190e21962870ecfe3ad8478b2",
      "tree": "1d84725c98eb190fbe4109a230eba5b63993c078",
      "parents": [
        "bbd6eb82d7b97c35b887a19e55d887cbeed0ce17"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Fri Jul 10 11:45:03 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Fri Jul 10 11:45:03 2026 +0100"
      },
      "message": "Policy Containing Primitive fix\n"
    },
    {
      "commit": "bbd6eb82d7b97c35b887a19e55d887cbeed0ce17",
      "tree": "eb07263218515d535a8209ed1c425cce2ef33fd7",
      "parents": [
        "d278c9d2a44d5983f897a146bb7c7e5ae0741fb2",
        "8c9f0ee121ead5f6d1f3167af34399d0ac2398e3"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Fri Jul 10 11:30:44 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 10 11:30:44 2026 +0100"
      },
      "message": "Merge pull request #51 from apache/coheigea/remote-bytes\n\nEnforce the amount of bytes that can be read from the remote reference"
    },
    {
      "commit": "8c9f0ee121ead5f6d1f3167af34399d0ac2398e3",
      "tree": "eb07263218515d535a8209ed1c425cce2ef33fd7",
      "parents": [
        "d278c9d2a44d5983f897a146bb7c7e5ae0741fb2"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Fri Jul 10 11:17:58 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Fri Jul 10 11:17:58 2026 +0100"
      },
      "message": "Enforce the amount of bytes that can be read from the remote reference\n"
    },
    {
      "commit": "d278c9d2a44d5983f897a146bb7c7e5ae0741fb2",
      "tree": "cd36146efd267d795bc8bea495fce08719314ffd",
      "parents": [
        "4a8d608979fd876034d0b6f1ae21464cda20ab39",
        "a6091462d116e6e7ff9de776d4878c9fafa4cc89"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Fri Jul 10 10:51:41 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 10 10:51:41 2026 +0100"
      },
      "message": "Merge pull request #50 from apache/coheigea/policy-builder\n\nAdd limits for max depth, attributes, elements in a policy"
    },
    {
      "commit": "a6091462d116e6e7ff9de776d4878c9fafa4cc89",
      "tree": "cd36146efd267d795bc8bea495fce08719314ffd",
      "parents": [
        "4a8d608979fd876034d0b6f1ae21464cda20ab39"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Fri Jul 10 10:29:01 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Fri Jul 10 10:29:01 2026 +0100"
      },
      "message": "Add limits for max depth, attributes, elements in a policy\n"
    },
    {
      "commit": "4a8d608979fd876034d0b6f1ae21464cda20ab39",
      "tree": "3b6f591f38102b260bdc5457b78ddc9a002695a4",
      "parents": [
        "b27b701269df216842c187a21344ac6b2ca1c5e7",
        "76f9a223e67397d4ee7aea935b2715437b7bbcf3"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Fri Jul 10 09:03:55 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 10 09:03:55 2026 +0100"
      },
      "message": "Merge pull request #49 from apache/coheigea/policy-intersection\n\nFixing policy intersection bug"
    },
    {
      "commit": "76f9a223e67397d4ee7aea935b2715437b7bbcf3",
      "tree": "3b6f591f38102b260bdc5457b78ddc9a002695a4",
      "parents": [
        "b27b701269df216842c187a21344ac6b2ca1c5e7"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Fri Jul 10 09:01:05 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Fri Jul 10 09:01:05 2026 +0100"
      },
      "message": "Fixing policy intersection bug\n"
    },
    {
      "commit": "b27b701269df216842c187a21344ac6b2ca1c5e7",
      "tree": "4a6b13be7d63761ab214b0ef22774f0717bdd71f",
      "parents": [
        "35fe5245b3cf0876b3ded13dc69f6e98c685ce9e",
        "d356edef0df1a94cc5110644bda73c8d08094792"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Fri Jul 10 08:41:02 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 10 08:41:02 2026 +0100"
      },
      "message": "Merge pull request #48 from apache/coheigea/policy-alternatives\n\nnormalization alternative limit can be bypassed through ExactlyOne ag…"
    },
    {
      "commit": "d356edef0df1a94cc5110644bda73c8d08094792",
      "tree": "4a6b13be7d63761ab214b0ef22774f0717bdd71f",
      "parents": [
        "35fe5245b3cf0876b3ded13dc69f6e98c685ce9e"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Thu Jul 09 17:06:43 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Thu Jul 09 17:06:43 2026 +0100"
      },
      "message": "normalization alternative limit can be bypassed through ExactlyOne aggregation\n"
    },
    {
      "commit": "35fe5245b3cf0876b3ded13dc69f6e98c685ce9e",
      "tree": "400df770700b429a4ba5b75787e2d6f118c1c553",
      "parents": [
        "fd0a69884e59b94cb9cbca472e22fcceefdbf642",
        "39870cf545820905939359d9ae8017b00d524e0c"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Thu Jul 09 17:01:30 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 09 17:01:30 2026 +0100"
      },
      "message": "Merge pull request #47 from apache/coheigea/circular-reference-no-id\n\nDetect cycles when there is no Policy Id"
    },
    {
      "commit": "39870cf545820905939359d9ae8017b00d524e0c",
      "tree": "400df770700b429a4ba5b75787e2d6f118c1c553",
      "parents": [
        "fd0a69884e59b94cb9cbca472e22fcceefdbf642"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Thu Jul 09 16:59:06 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Thu Jul 09 16:59:06 2026 +0100"
      },
      "message": "Detect cycles when there is no Policy Id\n"
    },
    {
      "commit": "fd0a69884e59b94cb9cbca472e22fcceefdbf642",
      "tree": "c7f3ff0d3e0f754d5c8238529340a7821dc9f1d3",
      "parents": [
        "3f1fd7d2655f5d6e08e4e4fff69e8fb8a389a611",
        "1f3110158e9e1dc53faef0c9e3ffe4695190e4ca"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Thu Jul 09 16:01:46 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 09 16:01:46 2026 +0100"
      },
      "message": "Merge pull request #46 from apache/dependabot/github_actions/actions/setup-java-5.4.0\n\nBump actions/setup-java from 5 to 5.4.0"
    },
    {
      "commit": "3f1fd7d2655f5d6e08e4e4fff69e8fb8a389a611",
      "tree": "73ebc6ca94e0ae4cc90354c4863da89e2b6e4dd8",
      "parents": [
        "07c925fa6d3594518a5e7e5ef6262df418302da2",
        "bcb7b2105435641e324d269f53f0633cf23da772"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Thu Jul 09 16:01:26 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 09 16:01:26 2026 +0100"
      },
      "message": "Merge pull request #45 from apache/dependabot/github_actions/github/codeql-action-4.36.3\n\nBump github/codeql-action from 4.35.5 to 4.36.3"
    },
    {
      "commit": "1f3110158e9e1dc53faef0c9e3ffe4695190e4ca",
      "tree": "14297b5bb251d6eabd2305abbcddf9a32602a4e4",
      "parents": [
        "07c925fa6d3594518a5e7e5ef6262df418302da2"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jul 08 17:14:59 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Jul 08 17:14:59 2026 +0000"
      },
      "message": "Bump actions/setup-java from 5 to 5.4.0\n\nBumps [actions/setup-java](https://github.com/actions/setup-java) from 5 to 5.4.0.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/v5...v5.4.0)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-java\n  dependency-version: 5.4.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "bcb7b2105435641e324d269f53f0633cf23da772",
      "tree": "73ebc6ca94e0ae4cc90354c4863da89e2b6e4dd8",
      "parents": [
        "07c925fa6d3594518a5e7e5ef6262df418302da2"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 07 17:28:34 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 07 17:28:34 2026 +0000"
      },
      "message": "Bump github/codeql-action from 4.35.5 to 4.36.3\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.5 to 4.36.3.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/v4.35.5...v4.36.3)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n  dependency-version: 4.36.3\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "07c925fa6d3594518a5e7e5ef6262df418302da2",
      "tree": "e10edba0f9d6290e951e49f6ccabc21066852045",
      "parents": [
        "c977a73eb4785e8588c780f7616917e2464e66a3"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sat Jul 04 09:34:19 2026 +0000"
      },
      "committer": {
        "name": "Andreas Veithen-Knowles",
        "email": "andreas.veithen@gmail.com",
        "time": "Sat Jul 04 10:37:25 2026 +0100"
      },
      "message": "Bump actions/checkout from 6 to 7\n\nBumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n  dependency-version: \u00277\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "c977a73eb4785e8588c780f7616917e2464e66a3",
      "tree": "cb04ea126e6b5d2954c412fb532b6b674d6a583a",
      "parents": [
        "511537f0adcad0beacd928352a72891b65e11b72"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jul 01 17:18:15 2026 +0000"
      },
      "committer": {
        "name": "Andreas Veithen-Knowles",
        "email": "andreas.veithen@gmail.com",
        "time": "Sat Jul 04 10:32:15 2026 +0100"
      },
      "message": "Bump actions/cache from 5 to 6\n\nBumps [actions/cache](https://github.com/actions/cache) from 5 to 6.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/v5...v6)\n\n---\nupdated-dependencies:\n- dependency-name: actions/cache\n  dependency-version: \u00276\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "511537f0adcad0beacd928352a72891b65e11b72",
      "tree": "1f5db95b90e901321fca055899de15957a680898",
      "parents": [
        "0039f4493aee46521bd9a078ac68fa8d545abd8f"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jul 01 17:16:56 2026 +0000"
      },
      "committer": {
        "name": "Andreas Veithen-Knowles",
        "email": "andreas.veithen@gmail.com",
        "time": "Sat Jul 04 10:31:10 2026 +0100"
      },
      "message": "Bump org.apache:apache from 38 to 39\n\nBumps [org.apache:apache](https://github.com/apache/maven-apache-parent) from 38 to 39.\n- [Release notes](https://github.com/apache/maven-apache-parent/releases)\n- [Commits](https://github.com/apache/maven-apache-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache:apache\n  dependency-version: \u002739\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "0039f4493aee46521bd9a078ac68fa8d545abd8f",
      "tree": "a5cd35c21adcc29b6000c3fba768377d7f15e59f",
      "parents": [
        "9ca3a092134517adae74b56a3e68567d8a817ed3"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon May 25 23:12:54 2026 +0000"
      },
      "committer": {
        "name": "Andreas Veithen-Knowles",
        "email": "andreas.veithen@gmail.com",
        "time": "Mon Jun 15 23:02:24 2026 +0100"
      },
      "message": "Bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0\n\nBumps [org.apache.maven.plugins:maven-site-plugin](https://github.com/apache/maven-site-plugin) from 3.21.0 to 3.22.0.\n- [Release notes](https://github.com/apache/maven-site-plugin/releases)\n- [Commits](https://github.com/apache/maven-site-plugin/compare/maven-site-plugin-3.21.0...maven-site-plugin-3.22.0)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache.maven.plugins:maven-site-plugin\n  dependency-version: 3.22.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "9ca3a092134517adae74b56a3e68567d8a817ed3",
      "tree": "a264bdfead47418d5eb139aab2c98c80b0c97e85",
      "parents": [
        "e9cef85fec5f562ff72c094aaba4ae20bd268ce2"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jun 10 17:30:05 2026 +0000"
      },
      "committer": {
        "name": "Andreas Veithen-Knowles",
        "email": "andreas.veithen@gmail.com",
        "time": "Wed Jun 10 20:43:00 2026 +0100"
      },
      "message": "Bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15\n\nBumps [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) from 0.8.14 to 0.8.15.\n- [Release notes](https://github.com/jacoco/jacoco/releases)\n- [Commits](https://github.com/jacoco/jacoco/compare/v0.8.14...v0.8.15)\n\n---\nupdated-dependencies:\n- dependency-name: org.jacoco:jacoco-maven-plugin\n  dependency-version: 0.8.15\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "f001b5aaea81a040f13b2480ea09871feb357cdd",
      "tree": "fd7336dc1f011b4f912c75bd7cbe6fb21f5a5eb3",
      "parents": [
        "e9cef85fec5f562ff72c094aaba4ae20bd268ce2"
      ],
      "author": {
        "name": "Jarek Potiuk",
        "email": "jarek@potiuk.com",
        "time": "Sat May 30 02:02:04 2026 +0200"
      },
      "committer": {
        "name": "Jarek Potiuk",
        "email": "jarek@potiuk.com",
        "time": "Sat May 30 02:02:04 2026 +0200"
      },
      "message": "Add draft project security threat-model document\n\nAdds a draft project-level security threat-model document\n(draft-THREAT-MODEL.md) at repo root, improving discoverability\nfor automated security scanners running against this repository.\nThe file follows the rubric format used by several other ASF\nprojects piloting security-model discoverability.\n\nThe \"draft-\" prefix signals this is a proposal for the PMC to\nreview, correct, or reject — not a finalised maintainer-blessed\nmodel. Every claim carries a provenance tag (documented /\ninferred / maintainer) so reviewers can see where each claim\noriginates; §14 collects open questions for the maintainers.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) \u003cnoreply@anthropic.com\u003e\n"
    },
    {
      "commit": "e9cef85fec5f562ff72c094aaba4ae20bd268ce2",
      "tree": "7d18c2c3f980d81f824e606098117f739ef76266",
      "parents": [
        "9fe359226cd61fa32e9f5d066ad7e84ee5adfc17",
        "0ce27f95c30263fdd05ed1518f4e24631995da67"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Wed May 20 08:13:24 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed May 20 08:13:24 2026 +0100"
      },
      "message": "Merge pull request #29 from apache/dependabot/github_actions/github/codeql-action-4.35.5\n\nBump github/codeql-action from 4.35.4 to 4.35.5"
    },
    {
      "commit": "0ce27f95c30263fdd05ed1518f4e24631995da67",
      "tree": "7d18c2c3f980d81f824e606098117f739ef76266",
      "parents": [
        "9fe359226cd61fa32e9f5d066ad7e84ee5adfc17"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed May 20 01:52:08 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed May 20 01:52:08 2026 +0000"
      },
      "message": "Bump github/codeql-action from 4.35.4 to 4.35.5\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.4 to 4.35.5.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/v4.35.4...v4.35.5)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n  dependency-version: 4.35.5\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "9fe359226cd61fa32e9f5d066ad7e84ee5adfc17",
      "tree": "8c8df7f9dfbfc26f13ae49f6dfcb25d95def755e",
      "parents": [
        "6e5039657d6921970b1d6bee43d937828cf19aaa"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Mon May 18 09:36:57 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Mon May 18 09:36:57 2026 +0100"
      },
      "message": "Excluding .asf.yaml from rat check\n"
    },
    {
      "commit": "6e5039657d6921970b1d6bee43d937828cf19aaa",
      "tree": "b17b8a89de201a7fec987ed998c4bf73111c1a0e",
      "parents": [
        "333d6e45bfb83b6cd12c1ab4ed06fafcc47af14e",
        "aa5d1e05c75d3db531f32846f9087c33a0b6dae4"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Mon May 18 09:36:10 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon May 18 09:36:10 2026 +0100"
      },
      "message": "Merge pull request #28 from apache/infrastructure-ruleset-bot/default-branch-protection\n\n[INFRA] Set up default rulesets for default and release branches"
    },
    {
      "commit": "aa5d1e05c75d3db531f32846f9087c33a0b6dae4",
      "tree": "b17b8a89de201a7fec987ed998c4bf73111c1a0e",
      "parents": [
        "333d6e45bfb83b6cd12c1ab4ed06fafcc47af14e"
      ],
      "author": {
        "name": "The Apache Software Foundation",
        "email": "root-asf-gitbox-commits@apache.org",
        "time": "Fri May 15 18:10:39 2026 -0500"
      },
      "committer": {
        "name": "The Apache Software Foundation",
        "email": "root-asf-gitbox-commits@apache.org",
        "time": "Fri May 15 18:10:39 2026 -0500"
      },
      "message": "Set up default protection ruleset for default and release branches"
    },
    {
      "commit": "333d6e45bfb83b6cd12c1ab4ed06fafcc47af14e",
      "tree": "a5814e2490a4dd63afc64f434b442243ae323f46",
      "parents": [
        "55efad88bb1b453889bf0706d1399b9bf901b03e",
        "c37da7a40f3a9f80b05fb75237d5b545f5a63765"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Tue May 12 05:59:11 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue May 12 05:59:11 2026 +0100"
      },
      "message": "Merge pull request #27 from apache/dependabot/github_actions/github/codeql-action-4.35.4\n\nBump github/codeql-action from 4.35.3 to 4.35.4"
    },
    {
      "commit": "55efad88bb1b453889bf0706d1399b9bf901b03e",
      "tree": "c6e7aa2df9ae5fc9db623bc4ab4301a59a22dff8",
      "parents": [
        "c721f7ef586fcf73c86550971acac00174a2ccd7",
        "ebda1971f5601f762f297426818b167fb671da0a"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Tue May 12 05:58:46 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue May 12 05:58:46 2026 +0100"
      },
      "message": "Merge pull request #26 from apache/dependabot/maven/org.apache-apache-38\n\nBump org.apache:apache from 37 to 38"
    },
    {
      "commit": "c37da7a40f3a9f80b05fb75237d5b545f5a63765",
      "tree": "cbf7dd33bf2298b69a7c982471278f1347a77992",
      "parents": [
        "c721f7ef586fcf73c86550971acac00174a2ccd7"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue May 12 00:37:39 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue May 12 00:37:39 2026 +0000"
      },
      "message": "Bump github/codeql-action from 4.35.3 to 4.35.4\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.3 to 4.35.4.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/v4.35.3...v4.35.4)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n  dependency-version: 4.35.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "ebda1971f5601f762f297426818b167fb671da0a",
      "tree": "c6e7aa2df9ae5fc9db623bc4ab4301a59a22dff8",
      "parents": [
        "c721f7ef586fcf73c86550971acac00174a2ccd7"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue May 12 00:36:32 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue May 12 00:36:32 2026 +0000"
      },
      "message": "Bump org.apache:apache from 37 to 38\n\nBumps [org.apache:apache](https://github.com/apache/maven-apache-parent) from 37 to 38.\n- [Release notes](https://github.com/apache/maven-apache-parent/releases)\n- [Commits](https://github.com/apache/maven-apache-parent/commits)\n\n---\nupdated-dependencies:\n- dependency-name: org.apache:apache\n  dependency-version: \u002738\u0027\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "c721f7ef586fcf73c86550971acac00174a2ccd7",
      "tree": "4baddd7034ec353fc531c0bad099fc2c7a38ad11",
      "parents": [
        "4d59a8d2255403dfe3eebd8520f95ec6149aa15a",
        "d61fb3557b410d4e99db0f649e2c8db8c53a6d88"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@users.noreply.github.com",
        "time": "Fri May 08 08:04:40 2026 +0100"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri May 08 08:04:40 2026 +0100"
      },
      "message": "Merge pull request #25 from apache/dependabot/github_actions/github/codeql-action-4.35.3\n\nBump github/codeql-action from 4 to 4.35.3"
    },
    {
      "commit": "d61fb3557b410d4e99db0f649e2c8db8c53a6d88",
      "tree": "4baddd7034ec353fc531c0bad099fc2c7a38ad11",
      "parents": [
        "4d59a8d2255403dfe3eebd8520f95ec6149aa15a"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu May 07 17:22:28 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu May 07 17:22:28 2026 +0000"
      },
      "message": "Bump github/codeql-action from 4 to 4.35.3\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4 to 4.35.3.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/v4...v4.35.3)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n  dependency-version: 4.35.3\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "4d59a8d2255403dfe3eebd8520f95ec6149aa15a",
      "tree": "f9222eec121420947ae06669745709d751f1d92b",
      "parents": [
        "92fd57d17101d3844cb7966be57d747fb468750f"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Thu Apr 30 11:31:17 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Thu Apr 30 11:31:17 2026 +0100"
      },
      "message": "Correcting checksum link\n"
    },
    {
      "commit": "92fd57d17101d3844cb7966be57d747fb468750f",
      "tree": "15e881982adc19ff99b30d735fadced80c63f161",
      "parents": [
        "206b85d78421eeb42d344d23ef0e0d033e92f049"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Thu Apr 30 10:42:58 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Thu Apr 30 10:42:58 2026 +0100"
      },
      "message": "Adding security site\n"
    },
    {
      "commit": "206b85d78421eeb42d344d23ef0e0d033e92f049",
      "tree": "9fc0a1e1c995e08e4793a389d54fdc1173f36206",
      "parents": [
        "4a49683f90669ca1497daf3a25d36d2c36143bd4"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Wed Apr 29 10:05:32 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Wed Apr 29 10:05:32 2026 +0100"
      },
      "message": "Updating website for 3.2.2 release\n"
    },
    {
      "commit": "4a49683f90669ca1497daf3a25d36d2c36143bd4",
      "tree": "e533bb1365db6b5e764eef5510a177dc6632f0fd",
      "parents": [
        "10ca5f0fd130174351fd93de6c708528099479c8"
      ],
      "author": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Wed Apr 29 10:01:20 2026 +0100"
      },
      "committer": {
        "name": "Colm O hEigeartaigh",
        "email": "coheigea@apache.org",
        "time": "Wed Apr 29 10:01:20 2026 +0100"
      },
      "message": "Fixing Fluido skin for website\n"
    }
  ],
  "next": "10ca5f0fd130174351fd93de6c708528099479c8"
}