issues  

Messages by Date

• 2026/07/21 Re: [I] Logout does not work properly on Safari and Firefox (tooling-trusted-releases) via GitHub
• 2026/07/21 Re: [I] Ensure that key revocation is tracked for signature verification (tooling-trusted-releases) via GitHub
• 2026/07/21 [I] CAP approval of archived release leaves extra notifications (tooling-trusted-releases) via GitHub
• 2026/07/21 Re: [I] Recycle the ATR cap-test token (tooling-trusted-releases) via GitHub
• 2026/07/21 Re: [I] Recycle the ATR cap-test token (tooling-trusted-releases) via GitHub
• 2026/07/21 Re: [I] Logout does not work properly on Safari and Firefox (tooling-trusted-releases) via GitHub
• 2026/07/21 [I] Client HEAD broke against server [arm] (tooling-trusted-releases) via GitHub
• 2026/07/21 Re: [I] Logout does not work properly on Safari and Firefox (tooling-trusted-releases) via GitHub
• 2026/07/21 Re: [I] Recycle the ATR cap-test token (tooling-trusted-releases) via GitHub
• 2026/07/20 Re: [I] Logout does not work properly on Safari and Firefox (tooling-trusted-releases) via GitHub
• 2026/07/20 [I] Recycle the ATR cap-test token (tooling-trusted-releases) via GitHub
• 2026/07/20 Re: [PR] Bump actions/setup-java from 5.4.0 to 5.5.0 (tooling-actions) via GitHub
• 2026/07/20 Re: [PR] Bump astral-sh/setup-uv from 8.3.0 to 8.3.2 (tooling-actions) via GitHub
• 2026/07/20 Re: [PR] Bump astral-sh/setup-uv from 8.2.0 to 8.3.2 (tooling-releases-client) via GitHub
• 2026/07/20 [PR] Bump actions/setup-java from 5.4.0 to 5.5.0 (tooling-actions) via GitHub
• 2026/07/20 [PR] Bump astral-sh/setup-uv from 8.3.0 to 8.3.2 (tooling-actions) via GitHub
• 2026/07/20 [PR] Bump actions/checkout from 7.0.0 to 7.0.1 [tooling-atr-maven-plugin] via GitHub
• 2026/07/20 Re: [PR] Bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (tooling-releases-client) via GitHub
• 2026/07/20 Re: [PR] Bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (tooling-releases-client) via GitHub
• 2026/07/20 [PR] Bump astral-sh/setup-uv from 8.2.0 to 8.3.2 (tooling-releases-client) via GitHub
• 2026/07/20 Re: [I] Inefficient queries are causing very long page loads (tooling-trusted-releases) via GitHub
• 2026/07/20 Re: [I] Inefficient queries are causing very long page loads (tooling-trusted-releases) via GitHub
• 2026/07/20 [I] Improve the UX of check results (tooling-trusted-releases) via GitHub
• 2026/07/20 [I] Inefficient queries are causing very long page loads (tooling-trusted-releases) via GitHub
• 2026/07/20 Re: [I] Attic process track (tooling-trusted-releases) via GitHub
• 2026/07/20 Re: [I] Attic process track (tooling-trusted-releases) via GitHub
• 2026/07/17 Re: [I] Add a cooldown period to pre-commit configuration (tooling-trusted-releases) via GitHub
• 2026/07/17 [I] Add a cooldown period to pre-commit configuration (tooling-trusted-releases) via GitHub
• 2026/07/17 Re: [PR] #1417 - Support for subkeys (tooling-trusted-releases) via GitHub
• 2026/07/17 Re: [I] Runtime container runs as root (UID 0) while parsing attacker-influenced release artifacts (tooling-trusted-releases) via GitHub
• 2026/07/17 Re: [I] Runtime container runs as root (UID 0) while parsing attacker-influenced release artifacts (tooling-trusted-releases) via GitHub
• 2026/07/17 Re: [I] Add management options for KEYS files, and remove regenerate all (tooling-trusted-releases) via GitHub
• 2026/07/17 Re: [I] Add management options for KEYS files, and remove regenerate all (tooling-trusted-releases) via GitHub
• 2026/07/17 Re: [I] Client HEAD broke against server [sbp] (tooling-trusted-releases) via GitHub
• 2026/07/17 Re: [I] Client HEAD broke against server [sbp] (tooling-trusted-releases) via GitHub
• 2026/07/17 Re: [I] Client HEAD broke against server [arm] (tooling-trusted-releases) via GitHub
• 2026/07/17 Re: [I] Client HEAD broke against server [arm] (tooling-trusted-releases) via GitHub
• 2026/07/17 [I] Client HEAD broke against server [arm] (tooling-trusted-releases) via GitHub
• 2026/07/17 Re: [PR] #1417 - Support for subkeys (tooling-trusted-releases) via GitHub
• 2026/07/17 Re: [PR] #1417 - Support for subkeys (tooling-trusted-releases) via GitHub
• 2026/07/17 Re: [I] Attic process track (tooling-trusted-releases) via GitHub
• 2026/07/17 Re: [PR] #1417 - Support for subkeys (tooling-trusted-releases) via GitHub
• 2026/07/17 [PR] #1417 - Support for subkeys (tooling-trusted-releases) via GitHub
• 2026/07/16 [I] Client HEAD broke against server [sbp] (tooling-trusted-releases) via GitHub
• 2026/07/16 [I] Ensure that key revocation is tracked for signature verification (tooling-trusted-releases) via GitHub
• 2026/07/16 Re: [I] Expired keys accepted for signing check (tooling-trusted-releases) via GitHub
• 2026/07/16 [I] Review the handling and treatment of signing subkeys throughout ATR (tooling-trusted-releases) via GitHub
• 2026/07/16 [PR] Bump actions/setup-java from 5.5.0 to 5.6.0 [tooling-atr-maven-plugin] via GitHub
• 2026/07/16 Re: [I] Expired keys accepted for signing check (tooling-trusted-releases) via GitHub
• 2026/07/16 Re: [I] Expired keys accepted for signing check (tooling-trusted-releases) via GitHub
• 2026/07/16 [I] Make some check results more prominent, CTA style (tooling-trusted-releases) via GitHub
• 2026/07/16 Re: [I] Signing SBOMs (tooling-trusted-releases) via GitHub
• 2026/07/16 Re: [I] Expired keys accepted for signing check (tooling-trusted-releases) via GitHub
• 2026/07/16 [I] Expired keys accepted for signing check (tooling-trusted-releases) via GitHub
• 2026/07/16 [I] Expired keys accepted for signing check (tooling-trusted-releases) via GitHub
• 2026/07/16 Re: [I] Reclassify SBOMs as artifacts and add new check (tooling-trusted-releases) via GitHub
• 2026/07/16 Re: [I] Reclassify SBOMs as artifacts and add new check (tooling-trusted-releases) via GitHub
• 2026/07/16 Re: [I] Client HEAD broke against server [arm] (tooling-trusted-releases) via GitHub
• 2026/07/16 Re: [I] Client HEAD broke against server [arm] (tooling-trusted-releases) via GitHub
• 2026/07/16 Re: [I] Client HEAD broke against server [arm] (tooling-trusted-releases) via GitHub
• 2026/07/16 Re: [I] Generated SBOM missing spec information for CDX check (tooling-trusted-releases) via GitHub
• 2026/07/16 Re: [I] Generated SBOM missing spec information for CDX check (tooling-trusted-releases) via GitHub
• 2026/07/16 Re: [PR] Remove links to ATR's own downloads area (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] Remove links to ATR's own downloads area (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [I] Missing Centralized Documentation of Resource-Intensive Operations (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [I] Missing Centralized Documentation of Resource-Intensive Operations (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [I] Remove the downloads area feature (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] Remove links to ATR's own downloads area (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] #1400 - Initial stab at SBOM check (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] Remove links to ATR's own downloads area (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] Remove links to ATR's own downloads area (tooling-trusted-releases) via GitHub
• 2026/07/15 [PR] Remove links to ATR's own downloads area (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] #1400 - Initial stab at SBOM check (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [I] Remove the downloads area feature (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [I] Admin page for seeding Projects and Artifact Catalog (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [I] Release archival actions (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] #1400 - Initial stab at SBOM check (tooling-trusted-releases) via GitHub
• 2026/07/15 [GH] #1400 - Initial stab at SBOM check (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [I] Remove the downloads area feature (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] Bump advanced-security/dismiss-alerts from 2.0.2 to 2.0.3 (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] Bump the codeql-action group with 2 updates (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] Bump astral-sh/setup-uv from 8.3.1 to 8.3.2 (tooling-trusted-releases) via GitHub
• 2026/07/15 [PR] Bump astral-sh/setup-uv from 8.3.1 to 8.3.2 (tooling-trusted-releases) via GitHub
• 2026/07/15 [PR] Bump advanced-security/dismiss-alerts from 2.0.2 to 2.0.3 (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] Bump github/codeql-action/init from 4.36.3 to 4.37.0 (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] Bump github/codeql-action/init from 4.36.3 to 4.37.0 (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] Bump github/codeql-action/analyze from 4.36.3 to 4.37.0 (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] Bump github/codeql-action/analyze from 4.36.3 to 4.37.0 (tooling-trusted-releases) via GitHub
• 2026/07/15 [PR] Bump the codeql-action group with 2 updates (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] Bump github/codeql-action/init from 4.36.2 to 4.36.3 (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] Bump github/codeql-action/analyze from 4.36.2 to 4.36.3 (tooling-trusted-releases) via GitHub
• 2026/07/15 [GH] #1400 - Initial stab at SBOM check (tooling-trusted-releases) via GitHub
• 2026/07/15 [PR] Bump js-yaml from 3.14.2 to 3.15.0 in /website (tooling-gofannon) via GitHub
• 2026/07/15 Re: [PR] #1400 - Initial stab at SBOM check (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] Bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] Bump docker/build-push-action from 7.2.0 to 7.3.0 (tooling-trusted-releases) via GitHub
• 2026/07/15 Re: [PR] Bump astral-sh/setup-uv from 8.2.0 to 8.3.1 (tooling-trusted-releases) via GitHub
• 2026/07/15 [PR] #1400 - Initial stab at SBOM check (tooling-trusted-releases) via GitHub
• 2026/07/14 [PR] Bump docker/build-push-action from 7.2.0 to 7.3.0 (tooling-trusted-releases) via GitHub
• 2026/07/14 [PR] Bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (tooling-trusted-releases) via GitHub
• 2026/07/14 [PR] Bump github/codeql-action/init from 4.36.2 to 4.36.3 (tooling-trusted-releases) via GitHub
• 2026/07/14 [PR] Bump github/codeql-action/analyze from 4.36.2 to 4.36.3 (tooling-trusted-releases) via GitHub
• 2026/07/14 [PR] Bump astral-sh/setup-uv from 8.2.0 to 8.3.1 (tooling-trusted-releases) via GitHub
• 2026/07/14 Re: [I] Fix the embargoed release wording (tooling-trusted-releases) via GitHub
• 2026/07/14 Re: [I] Reclassify SBOMs as artifacts and add new check (tooling-trusted-releases) via GitHub
• 2026/07/14 Re: [I] Reclassify SBOMs as artifacts and add new check (tooling-trusted-releases) via GitHub
• 2026/07/14 Re: [I] Fix the embargoed release wording (tooling-trusted-releases) via GitHub
• 2026/07/14 [PR] Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 [tooling-atr-maven-plugin] via GitHub
• 2026/07/14 [PR] Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 [tooling-atr-maven-plugin] via GitHub
• 2026/07/14 [I] Ensure that uploaded files are streamed (tooling-trusted-releases) via GitHub
• 2026/07/14 [I] Do not record recurring tasks in the database, but log them to a file instead (tooling-trusted-releases) via GitHub
• 2026/07/14 Re: [I] Build ATR production server (tooling-trusted-releases) via GitHub
• 2026/07/14 Re: [I] Allow checksum generation without signature (tooling-trusted-releases) via GitHub
• 2026/07/14 Re: [I] Allow checksum generation without signature (tooling-trusted-releases) via GitHub
• 2026/07/14 Re: [I] Fix the embargoed release wording (tooling-trusted-releases) via GitHub
• 2026/07/14 Re: [PR] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/14 Re: [PR] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/14 Re: [I] Document ATR disk layout and size requirements (tooling-trusted-releases) via GitHub
• 2026/07/14 Re: [I] Runtime container runs as root (UID 0) while parsing attacker-influenced release artifacts (tooling-trusted-releases) via GitHub
• 2026/07/14 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/14 [I] Generated SBOM missing spec information for CDX check (tooling-trusted-releases) via GitHub
• 2026/07/14 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/14 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/14 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/14 [I] Client HEAD broke against server [arm] (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [I] The `atr vote start` command does not use predefined templates (tooling-releases-client) via GitHub
• 2026/07/13 Re: [I] The `atr vote start` command does not use predefined templates (tooling-releases-client) via GitHub
• 2026/07/13 Re: [PR] Bump com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.1 [tooling-atr-maven-plugin] via GitHub
• 2026/07/13 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [PR] Adjust downloads menu target (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [I] Remove the downloads area feature (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [PR] Adjust downloads menu target (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [PR] Bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (tooling-actions) via GitHub
• 2026/07/13 [PR] Bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (tooling-actions) via GitHub
• 2026/07/13 Re: [I] Client SBOM functionality (tooling-trusted-releases) via GitHub
• 2026/07/13 [I] Allow checksum generation without signature (tooling-trusted-releases) via GitHub
• 2026/07/13 [I] Reclassify SBOMs as artifacts and add new check (tooling-trusted-releases) via GitHub
• 2026/07/13 [I] Enhance SBOM report (tooling-trusted-releases) via GitHub
• 2026/07/13 [I] Client SBOM functionality (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [PR] Bump org.junit:junit-bom from 6.1.1 to 6.1.2 [tooling-atr-maven-plugin] via GitHub
• 2026/07/13 [PR] Bump org.apache.maven.resolver:maven-resolver-api from 1.9.27 to 2.0.20 [tooling-atr-maven-plugin] via GitHub
• 2026/07/13 [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.7.0 to 3.8.0 [tooling-atr-maven-plugin] via GitHub
• 2026/07/13 [PR] Bump com.palantir.javaformat:palantir-java-format from 2.94.0 to 2.96.0 [tooling-atr-maven-plugin] via GitHub
• 2026/07/13 [PR] Bump org.junit:junit-bom from 6.1.1 to 6.1.2 [tooling-atr-maven-plugin] via GitHub
• 2026/07/13 [PR] Bump com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.1 [tooling-atr-maven-plugin] via GitHub
• 2026/07/13 Re: [PR] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/13 [PR] Bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (tooling-releases-client) via GitHub
• 2026/07/13 Re: [I] Client HEAD broke against server [arm] (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [I] Client HEAD broke against server [arm] (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [I] Client HEAD broke against server [main] (tooling-trusted-releases) via GitHub
• 2026/07/13 [I] Client HEAD broke against server [arm] (tooling-trusted-releases) via GitHub
• 2026/07/13 [I] Client HEAD broke against server [main] (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [I] The `atr check concerns` does not acknowledge "no concerns" (tooling-releases-client) via GitHub
• 2026/07/13 Re: [I] The `atr vote start` command does not use predefined templates (tooling-releases-client) via GitHub
• 2026/07/13 Re: [I] The `atr check concerns` does not acknowledge "no concerns" (tooling-releases-client) via GitHub
• 2026/07/13 Re: [I] The `atr check status` --verbose flag has no effect (tooling-releases-client) via GitHub
• 2026/07/13 Re: [I] The `atr check concerns` requires revision (tooling-releases-client) via GitHub
• 2026/07/13 Re: [I] The `atr check concerns` requires revision (tooling-releases-client) via GitHub
• 2026/07/13 Re: [PR] Adjust downloads menu target (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [PR] Adjust downloads menu target (tooling-trusted-releases) via GitHub
• 2026/07/13 [I] When required resources are down what happens (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [PR] Adjust downloads menu target (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [PR] Adjust downloads menu target (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [PR] Adjust downloads menu target (tooling-trusted-releases) via GitHub
• 2026/07/12 [I] The `atr vote start` command does not use predefined templates (tooling-releases-client) via GitHub
• 2026/07/12 [I] The `atr check concerns` does not acknowledge "no concerns" (tooling-releases-client) via GitHub
• 2026/07/12 Re: [I] The `atr check status` --verbose flag has no effect (tooling-releases-client) via GitHub
• 2026/07/12 [I] The `atr check status` --verbose flag has no effect (tooling-releases-client) via GitHub
• 2026/07/12 [I] The `atr check concerns` requires revision (tooling-releases-client) via GitHub
• 2026/07/11 Re: [I] Signing SBOMs (tooling-trusted-releases) via GitHub
• 2026/07/11 Re: [PR] Bump actions/setup-java from 5.3.0 to 5.5.0 [tooling-atr-maven-plugin] via GitHub
• 2026/07/11 Re: [PR] Bump org.junit:junit-bom from 6.1.0 to 6.1.1 [tooling-atr-maven-plugin] via GitHub
• 2026/07/11 Re: [PR] Bump org.apache:apache from 38 to 39 [tooling-atr-maven-plugin] via GitHub
• 2026/07/11 Re: [PR] Bump org.eclipse.sisu:sisu-maven-plugin from 1.0.0 to 1.0.1 [tooling-atr-maven-plugin] via GitHub
• 2026/07/11 Re: [PR] Bump com.palantir.javaformat:palantir-java-format from 2.93.0 to 2.94.0 [tooling-atr-maven-plugin] via GitHub
• 2026/07/11 Re: [I] Signing SBOMs (tooling-trusted-releases) via GitHub
• 2026/07/11 Re: [PR] Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.1 to 2.9.2 [tooling-atr-maven-plugin] via GitHub
• 2026/07/10 Re: [I] Remove the downloads area feature (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [PR] Adjust downloads menu target (tooling-trusted-releases) via GitHub
• 2026/07/10 [PR] Adjust downloads menu target (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Do not allow arbitrary committers to publish to SVN (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Do not allow arbitrary committers to publish to SVN (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Do not allow arbitrary committers to publish to SVN (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Runtime container runs as root (UID 0) while parsing attacker-influenced release artifacts (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Do not allow arbitrary committers to publish to SVN (tooling-trusted-releases) via GitHub
• 2026/07/10 [I] Remove the downloads area feature (tooling-trusted-releases) via GitHub
• 2026/07/10 [I] Do not allow arbitrary committers to publish to SVN (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Build ATR production server (tooling-trusted-releases) via GitHub
• 2026/07/10 [I] Fix the embargoed release wording (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Move SVN_DIST_PUBLIC_URL to the configuration (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Move SVN_DIST_PUBLIC_URL to the configuration (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Beta announcement with notes for PMCS which use repository.apache.org (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Beta announcement with notes for PMCS which use repository.apache.org (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [PR] Bump soupsieve from 2.8 to 2.8.4 (tooling-docs) via GitHub
• 2026/07/10 [I] Add management options for KEYS files, and remove regenerate all (tooling-trusted-releases) via GitHub
• 2026/07/10 [I] Signing SBOMs (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Integrate ATR secrets with Puppet (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Integrate ATR secrets with Puppet (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Document ATR disk layout and size requirements (tooling-trusted-releases) via GitHub
• 2026/07/10 [I] Move SVN_DIST_PUBLIC_URL to the configuration (tooling-trusted-releases) via GitHub

• Earlier messages
• Later messages