Commit graph

Select branches

Hide pull requests

bump-deps

bump-deps-v0.4.0

bump-vulnerable-deps

bump-x-net

composer-unset-sentinel

cosign-signing

deps/pre-v0.7.0

enforce-max-size-eviction

extract-portable-npm-metadata

fix-197-cooldown-scoped-purls

fix-database-log-173

http-timeout-config

issue-186-container-offline-auth

issue-186-upstream-auth

issue-225-sign-container-image

julia-support

lint-cleanup

main

path-traversal-decode

perf/cache-hit-path

pin-vendored-assets

registries-v0.6.0-cooldown

ui-polish

use-database-package

validate-package-name

#1

#10

#100

#101

#102

#103

#104

#105

#106

#107

#108

#109

#11

#110

#111

#113

#114

#115

#117

#119

#120

#121

#122

#124

#125

#13

#135

#136

#137

#138

#139

#14

#140

#146

#148

#15

#150

#151

#152

#153

#154

#156

#157

#158

#159

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#174

#175

#176

#177

#178

#179

#18

#180

#181

#185

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#198

#199

#2

#200

#201

#202

#203

#204

#205

#206

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#227

#229

#23

#230

#232

#233

#234

#235

#237

#238

#24

#240

#241

#243

#244

#245

#246

#25

#250

#251

#252

#253

#254

#255

#257

#258

#259

#26

#260

#267

#268

#269

#27

#270

#272

#273

#275

#277

#278

#279

#28

#280

#281

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#293

#294

#296

#297

#298

#299

#3

#30

#301

#302

#304

#307

#308

#31

#310

#311

#314

#315

#316

#317

#318

#319

#32

#324

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#340

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#368

#369

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#379

#38

#380

#381

#382

#383

#387

#388

#389

#39

#390

#391

#392

#393

#394

#395

#396

#397

#398

#399

#399

#4

#40

#400

#401

#402

#404

#405

#406

#407

#408

#413

#417

#418

#419

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#430

#431

#433

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#45

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#46

#462

#463

#464

#465

#468

#469

#47

#470

#471

#472

#473

#475

#476

#477

#479

#48

#481

#482

#483

#484

#485

#487

#488

#489

#490

#491

#492

#493

#494

#495

#496

#5

#50

#502

#503

#503

#504

#505

#506

#507

#508

#509

#51

#510

#511

#512

#513

#515

#516

#518

#519

#520

#527

#528

#531

#533

#534

#537

#538

#539

#540

#541

#544

#545

#546

#547

#548

#549

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#561

#564

#565

#566

#567

#568

#569

#57

#570

#571

#572

#573

#574

#575

#576

#577

#578

#579

#58

#580

#581

#582

#583

#584

#585

#586

#587

#588

#589

#59

#590

#591

#592

#593

#594

#595

#597

#598

#599

#6

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#610

#611

#612

#615

#616

#618

#620

#621

#622

#623

#624

#625

#626

#627

#628

#629

#63

#630

#631

#633

#634

#635

#636

#637

#638

#639

#64

#640

#641

#642

#643

#644

#645

#646

#647

#649

#650

#650

#651

#653

#654

#655

#656

#658

#659

#66

#660

#661

#662

#663

#664

#666

#667

#669

#67

#671

#671

#672

#674

#675

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#687

#687

#688

#688

#689

#689

#69

#690

#690

#691

#691

#692

#692

#693

#694

#694

#696

#697

#699

#7

#70

#71

#72

#77

#79

#8

#80

#81

#82

#83

#84

#85

#87

#88

#89

#9

#90

#91

#92

#93

#93

#94

#95

#97

#98

v0.1.0

v0.10.0

v0.11.0

v0.2.0

v0.2.1

v0.3.0

v0.3.1

v0.3.2

v0.4.0

v0.5.0

v0.5.1

v0.6.0

v0.6.1

v0.7.0

v0.8.0

v0.8.1

v0.9.0

v0.9.1

Mono Color

• 903fd94df9 Test that apk index errors leave out the URL Simon Chrzanowski 2026-11-05 12:34:32 +01:00
• eb34a1ac6f Name the apk repository, not its URL, in index errors Simon Chrzanowski 2026-11-05 12:33:46 +01:00
• 5c46a39b2d Merge remote-tracking branch 'origin/main' into feat/mirror-refresh Simon Chrzanowski 2026-11-05 12:21:49 +01:00
• 4d70793351 Name the apk repository in mirror errors Simon Chrzanowski 2026-11-05 11:56:42 +01:00
• c20f64ebaa Keep the apk namespace for the mirror's repository lookup Simon Chrzanowski 2026-11-05 10:48:44 +01:00
• 1e916bf334 Merge remote-tracking branch 'origin/main' into feat/project-inventory Simon Chrzanowski 2026-11-05 10:47:14 +01:00
• 60872fe990 Use sbom v0.1.9 Simon Chrzanowski 2026-11-05 09:34:02 +01:00
• fba9e036df
  Merge pull request #656 from simonchrz/feat/mirror-apk Andrew Nesbitt 2026-11-05 08:24:32 +00:00
• c3f0c23dc3 Name the repository segment of the APK path in the mirror docs Simon Chrzanowski 2026-11-04 16:31:50 +01:00
• e4e14696d0 Say which edge packages the APK mirror can't recognise Simon Chrzanowski 2026-11-04 16:20:30 +01:00
• 7095ab67ef Keep the Projects link on an empty projects page Simon Chrzanowski 2026-11-04 16:16:35 +01:00
• 4e25396331 Refuse distro qualifiers that aren't an Alpine release Simon Chrzanowski 2026-11-04 16:09:00 +01:00
• 6d3410df41 Use sbom's ProjectRoots for the project's own packages Simon Chrzanowski 2026-11-04 16:05:16 +01:00
• adcda6ca8b Read APKINDEX.tar.gz also where Packages.adb is served beside it Simon Chrzanowski 2026-11-04 15:54:10 +01:00
• 3e2a84a88a Mirror Alpine packages Simon Chrzanowski 2026-11-04 15:44:01 +01:00
• 1912deba6c
  Merge pull request #620 from simonchrz/feat/composer-advisories Andrew Nesbitt 2026-11-04 12:38:40 +00:00
• 88c0ba8ab3 Use sbom's root detection for the project's own packages Simon Chrzanowski 2026-11-04 13:20:29 +01:00
• e358666482 Merge remote-tracking branch 'origin/main' into feat/project-inventory Simon Chrzanowski 2026-11-04 13:19:09 +01:00
• 82b45cbb1b Merge remote-tracking branch 'origin/main' into feat/composer-advisories Simon Chrzanowski 2026-11-04 13:05:10 +01:00
• 5b10559636
  Merge pull request #639 from simonchrz/feat/cooldown-withheld-versions Andrew Nesbitt 2026-11-04 12:01:24 +00:00
• ee6cac700c
  Merge pull request #655 from simonchrz/fix/composer-download-lookup-status Andrew Nesbitt 2026-11-04 11:59:55 +00:00
• cb330a5cbf Answer 502 when a Composer download's metadata lookup fails upstream Simon Chrzanowski 2026-11-03 20:10:24 +01:00
• 683455aecb Test available_at through the API and drop FillVersionPublishedAt Simon Chrzanowski 2026-11-03 14:39:36 +01:00
• 9777f4b9bc
  Merge pull request #625 from simonchrz/feat/change-feeds Andrew Nesbitt 2026-11-03 11:36:58 +00:00
• 19eaf1b73e Fix npm dist-tags when cooldown holds back tagged versions Ondrej Kokes 2026-11-03 11:37:04 +01:00
• 8aebf94f5d Merge remote-tracking branch 'origin/main' into feat/change-feeds Simon Chrzanowski 2026-11-03 11:23:40 +01:00
• 83524b7485 Merge remote-tracking branch 'origin/main' into feat/cooldown-withheld-versions Simon Chrzanowski 2026-11-03 11:23:22 +01:00
• c1a1149bd8
  Merge pull request #622 from simonchrz/feat/apk-snapshots Andrew Nesbitt 2026-11-03 09:36:40 +00:00
• abee8ef879
  Merge pull request #640 from simonchrz/feat/npm-stream-rewrite Andrew Nesbitt 2026-11-03 09:33:36 +00:00
• 7cb905638c
  Keep proxyCachedWithEncoding doc on the function it describes Andrew Nesbitt 2026-11-03 09:28:29 +00:00
• 47ed4b4194
  Merge pull request #649 from simonchrz/fix/truncated-upstream-metadata Andrew Nesbitt 2026-11-03 09:22:25 +00:00
• 83a0822979
  Merge pull request #644 from simonchrz/mirror-parallel-blobs Andrew Nesbitt 2026-11-03 09:15:16 +00:00
• d139d190de
  Merge pull request #643 from simonchrz/docker-healthcheck Andrew Nesbitt 2026-11-03 08:59:28 +00:00
• 0a961584af
  Merge pull request #653 from simonchrz/docs/sqlite-local-disk Andrew Nesbitt 2026-11-02 18:07:05 +00:00
• 07c740737f
  Merge pull request #651 from kokes/kokes/ui-version-commit simon chrzanowski 2026-11-02 18:17:22 +01:00
• dd987f2de7 Document that SQLite needs a local disk or block volume Simon Chrzanowski 2026-11-02 16:56:33 +01:00
• f35d152be0 expose commit sha in UI footer Ondrej Kokes 2026-11-02 11:37:28 +01:00
• 26cae44e41 Bump cooldown to v0.3.1 and set cooldown directly in stream tests Simon Chrzanowski 2026-11-02 11:33:11 +01:00
• cc8f50cfb4
  Merge pull request #646 from simonchrz/fix/version-publish-time-package Andrew Nesbitt 2026-11-02 10:16:34 +00:00
• 98ff4fd4a2 Merge remote-tracking branch 'origin/main' into feat/npm-stream-rewrite Simon Chrzanowski 2026-11-01 12:54:47 +01:00
• b08cebf9e4 Cap npm packuments streamed into storage Simon Chrzanowski 2026-11-01 12:53:00 +01:00
• 6dbda21faf Move the in-memory truncation fix to its own pull request Simon Chrzanowski 2026-11-01 12:49:09 +01:00
• 143eef7f05 Test snapshots on cache hits and record them through proxyCachedWithEncoding Simon Chrzanowski 2026-11-01 12:48:37 +01:00
• 358b1355a9 Fail metadata reads when upstream cuts a document off Simon Chrzanowski 2026-11-01 12:48:04 +01:00
• 7b91897fbb Merge remote-tracking branch 'origin/main' into feat/apk-snapshots Simon Chrzanowski 2026-11-01 12:44:35 +01:00
• 15789d40bb
  Update golang.org/x/net to v0.62.0 (#647) v0.11.0 simon chrzanowski 2026-10-31 21:14:53 +01:00
• 3a0e79d6b4 Fuzz SBOM parsing and test concurrent project uploads Simon Chrzanowski 2026-10-31 18:26:17 +01:00
• fd16ba1664 Let in-flight blobs finish when one fails Simon Chrzanowski 2026-10-31 18:15:11 +01:00
• 83a018bfd4 Test that stats versions add up with orphan publish times Simon Chrzanowski 2026-10-31 18:09:05 +01:00
• 32608d46c6 Update golang.org/x/net to v0.62.0 Simon Chrzanowski 2026-10-31 18:02:50 +01:00
• b73980e8ed Refresh each suite of a shared Debian pool on its own Simon Chrzanowski 2026-10-31 17:58:00 +01:00
• f0c96e87a8 Keep the stored copy when upstream cuts a metadata document off Simon Chrzanowski 2026-10-31 17:50:24 +01:00
• 11ff4cf314 Fetch an npm packument again when its stored copy is gone within the TTL Simon Chrzanowski 2026-10-31 16:55:15 +01:00
• c4979b9e76 Count stored publish times under their ecosystem in the stats Simon Chrzanowski 2026-10-31 15:19:11 +01:00
• e50179d0cc Refresh Swift and Helm packages, leave Julia out Simon Chrzanowski 2026-10-31 14:09:59 +01:00
• f80c826e73 Document mirror.refresh Simon Chrzanowski 2026-10-31 14:09:02 +01:00
• 2f2d01a414 Refresh Debian, Alpine and RPM packages from their indexes Simon Chrzanowski 2026-10-31 14:05:05 +01:00
• 3e4491287d Record the upstream URL of cached metadata Simon Chrzanowski 2026-10-31 13:57:49 +01:00
• 29863e858a Refresh the most used packages in the background Simon Chrzanowski 2026-10-31 13:53:37 +01:00
• 1979fb098e
  Accept Swift source repository PURLs in the denylist and retention rules (#641) simon chrzanowski 2026-10-31 12:34:05 +01:00
• 1cadc4a7ba Compare Go main modules with their case Simon Chrzanowski 2026-10-31 11:33:31 +01:00
• 7a77baf01a Keep namespace/name for Swift package URLs in the handler mapping Simon Chrzanowski 2026-10-31 11:33:31 +01:00
• c6635f3165 Merge remote-tracking branch 'origin/main' into feat/project-inventory Simon Chrzanowski 2026-10-31 11:29:24 +01:00
• ce99ad1aa2 Apply Swift source policies to every listed identity Simon Chrzanowski 2026-10-31 11:01:58 +01:00
• 3eadb3eb46
  Preserve Swift and Go compatibility when upgrading PURL (#642) Andrew Nesbitt 2026-10-31 09:49:35 +00:00
• a79a58b04e Guard the fake registry's manifests in mirror tests Simon Chrzanowski 2026-10-31 08:27:39 +01:00
• 4ae534eba3 Fetch an image's blobs concurrently when mirroring Simon Chrzanowski 2026-10-31 07:58:51 +01:00
• 479f26e09e Start project pruning with the project API and move enrichment routes out of serve Simon Chrzanowski 2026-10-30 19:29:11 +01:00
• 9458dc84e1 Share one PURL-to-handler mapping between the mirror and the inventory Simon Chrzanowski 2026-10-30 19:29:11 +01:00
• 04f732e147 Record APK snapshots from the document a request serves Simon Chrzanowski 2026-10-30 19:26:03 +01:00
• 3ce582c733 Keep the last good Composer index when upstream sends one that doesn't parse Simon Chrzanowski 2026-10-30 19:25:41 +01:00
• 760623e617 Serve the stored npm packument on upstream 404 and refetch on a 304 for a missing blob Simon Chrzanowski 2026-10-30 19:25:09 +01:00
• bdbd9630c5 Resolve Swift source denylist entries in proxy mirror too Simon Chrzanowski 2026-10-30 19:24:13 +01:00
• 6ee0ef08f1 Merge #642 (purl v0.2.1, registries v0.13.0) into feat/change-feeds Simon Chrzanowski 2026-10-30 19:23:28 +01:00
• d01d32e310 Merge remote-tracking branch 'origin/main' into feat/project-inventory Simon Chrzanowski 2026-10-30 19:22:04 +01:00
• d0435f6137 Merge remote-tracking branch 'origin/main' into feat/change-feeds Simon Chrzanowski 2026-10-30 19:21:37 +01:00
• f3c38bee42 Merge remote-tracking branch 'origin/main' into feat/composer-advisories Simon Chrzanowski 2026-10-30 19:21:32 +01:00
• 9941d79561 Document the published container image and add a Docker health check Simon Chrzanowski 2026-10-30 19:19:01 +01:00
• f32b46b71a
  Preserve Go cache and policy behavior when upgrading PURL Andrew Nesbitt 2026-10-30 18:02:30 +00:00
• ba95de17f3
  Handle Swift registry identities in cache and vulnerability APIs Andrew Nesbitt 2026-10-30 14:41:45 +00:00
• f9024ba30b Accept Swift source repository PURLs in the denylist and retention rules Simon Chrzanowski 2026-10-30 15:39:25 +01:00
• ddba210a60 Serialize snapshot recording per document on Postgres Simon Chrzanowski 2026-10-30 15:31:31 +01:00
• 53cac1fb74 Merge remote-tracking branch 'origin/main' into feat/apk-snapshots Simon Chrzanowski 2026-10-30 15:27:57 +01:00
• 8e760ca26d Merge remote-tracking branch 'origin/main' into feat/npm-stream-rewrite Simon Chrzanowski 2026-10-30 15:25:21 +01:00
• 8c9e87f15f Stage fetched packuments, fall back on storage errors, stream version lookups Simon Chrzanowski 2026-10-30 15:24:18 +01:00
• cb566d5df6
  Expire cooldown rewrites when a withheld version becomes available (#638) simon chrzanowski 2026-10-30 15:06:42 +01:00
• ce9ab47eac
  Add --latest to mirror only the newest version (#631) simon chrzanowski 2026-10-30 14:59:52 +01:00
• 5b57994c09 Stream npm packuments through storage when rewriting them Simon Chrzanowski 2026-10-30 14:14:10 +01:00
• 1205fa759e Show versions held back by cooldown on the package page and in the API Simon Chrzanowski 2026-10-30 13:54:24 +01:00
• 77525b0d78 Store each snapshot recording at a path of its own Simon Chrzanowski 2026-10-30 10:26:21 +01:00
• 77e07d4be9 Merge remote-tracking branch 'origin/main' into feat/apk-snapshots Simon Chrzanowski 2026-10-30 10:23:29 +01:00
• ea2baef8dd Pick the latest version with registries.FetchLatestVersion Simon Chrzanowski 2026-10-30 10:20:36 +01:00
• 91e584b35a Merge remote-tracking branch 'origin/main' into feat/mirror-latest Simon Chrzanowski 2026-10-30 10:20:15 +01:00
• 0b1ca01e2c
  Merge pull request #627 from git-pkgs/docs/docker-builds Andrew Nesbitt 2026-10-30 09:11:59 +00:00
• a06b20fd00
  Address Docker guide review points Andrew Nesbitt 2026-10-30 09:10:44 +00:00
• c4615ff561 Read change feeds through git-pkgs/registries Simon Chrzanowski 2026-10-30 10:09:21 +01:00
• fc23498c77 Merge remote-tracking branch 'origin/main' into feat/change-feeds Simon Chrzanowski 2026-10-30 10:06:41 +01:00
• cc1b8ac870
  Merge pull request #608 from simonchrz/feat/mirror-cran Andrew Nesbitt 2026-10-30 08:59:07 +00:00
• 63a9d9aac2
  Merge remote-tracking branch 'origin/main' into feat/composer-advisories Andrew Nesbitt 2026-10-30 08:50:10 +00:00
• 9babab7380
  Describe archived CRAN versions as fetched unchecked Andrew Nesbitt 2026-10-30 08:51:35 +00:00