Commit graph

Select branches

Hide pull requests

bump-deps

bump-deps-v0.4.0

bump-vulnerable-deps

bump-x-net

composer-unset-sentinel

cosign-signing

deps/pre-v0.7.0

enforce-max-size-eviction

extract-portable-npm-metadata

fix-197-cooldown-scoped-purls

fix-database-log-173

http-timeout-config

issue-186-container-offline-auth

issue-186-upstream-auth

issue-225-sign-container-image

julia-support

lint-cleanup

main

path-traversal-decode

perf/cache-hit-path

pin-vendored-assets

registries-v0.6.0-cooldown

ui-polish

use-database-package

validate-package-name

#1

#10

#100

#101

#102

#103

#104

#105

#106

#107

#108

#109

#11

#110

#111

#113

#114

#115

#117

#119

#120

#121

#122

#124

#125

#13

#135

#136

#137

#138

#139

#14

#140

#146

#148

#15

#150

#151

#152

#153

#154

#156

#157

#158

#159

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#174

#175

#176

#177

#178

#179

#18

#180

#181

#185

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#198

#199

#2

#200

#201

#202

#203

#204

#205

#206

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#227

#229

#23

#230

#232

#233

#234

#235

#237

#238

#24

#240

#241

#243

#244

#245

#246

#25

#250

#251

#252

#253

#254

#255

#257

#258

#259

#26

#260

#267

#268

#269

#27

#270

#272

#273

#275

#277

#278

#279

#28

#280

#281

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#293

#294

#296

#297

#298

#299

#3

#30

#301

#302

#304

#307

#308

#31

#310

#311

#314

#315

#316

#317

#318

#319

#32

#324

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#340

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#368

#369

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#379

#38

#380

#381

#382

#383

#387

#388

#389

#39

#390

#391

#392

#393

#394

#395

#396

#397

#398

#399

#399

#4

#40

#400

#401

#402

#404

#405

#406

#407

#408

#413

#417

#418

#419

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#430

#431

#433

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#45

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#46

#462

#463

#464

#465

#468

#469

#47

#470

#471

#472

#473

#475

#476

#477

#479

#48

#481

#482

#483

#484

#485

#487

#488

#489

#490

#491

#492

#493

#494

#495

#496

#5

#50

#502

#503

#503

#504

#505

#506

#507

#508

#509

#51

#510

#511

#512

#513

#515

#516

#518

#519

#520

#527

#528

#531

#533

#534

#537

#538

#539

#540

#541

#544

#545

#546

#547

#548

#549

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#561

#564

#565

#566

#567

#568

#569

#57

#570

#571

#572

#573

#574

#575

#576

#577

#578

#579

#58

#580

#581

#582

#583

#584

#585

#586

#587

#588

#589

#59

#590

#591

#592

#593

#594

#595

#597

#598

#599

#6

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#610

#611

#612

#615

#616

#618

#620

#621

#622

#623

#624

#625

#626

#627

#628

#629

#63

#630

#631

#633

#634

#635

#636

#637

#638

#639

#64

#640

#641

#642

#643

#644

#645

#646

#647

#649

#650

#650

#651

#653

#654

#655

#656

#658

#659

#66

#660

#661

#662

#663

#664

#666

#667

#669

#67

#671

#671

#672

#674

#675

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#687

#687

#688

#688

#689

#689

#69

#690

#690

#691

#691

#692

#692

#693

#694

#694

#696

#697

#699

#7

#70

#71

#72

#77

#79

#8

#80

#81

#82

#83

#84

#85

#87

#88

#89

#9

#90

#91

#92

#93

#93

#94

#95

#97

#98

v0.1.0

v0.10.0

v0.11.0

v0.2.0

v0.2.1

v0.3.0

v0.3.1

v0.3.2

v0.4.0

v0.5.0

v0.5.1

v0.6.0

v0.6.1

v0.7.0

v0.8.0

v0.8.1

v0.9.0

v0.9.1

Mono Color

• 88f22cc440
  Merge pull request #615 from simonchrz/ci/monthly-minor-on-breaking Andrew Nesbitt 2026-10-30 08:48:34 +00:00
• e09844e3d7
  Merge pull request #610 from simonchrz/feat/mirror-brew Andrew Nesbitt 2026-10-30 08:47:36 +00:00
• 54ad028652
  Merge pull request #629 from simonchrz/fix/cooldown-unsupported-ecosystems Andrew Nesbitt 2026-10-30 08:43:36 +00:00
• 37ecc3d8ce
  Trim BottleImage doc comment and rejoin the brew docs list Andrew Nesbitt 2026-10-30 08:40:35 +00:00
• 2928b5c27f
  Detect Helm's cooldown check in the handler coverage test Andrew Nesbitt 2026-10-30 08:36:39 +00:00
• 195d9d31f4
  Merge pull request #623 from simonchrz/feat/npm-attestations Andrew Nesbitt 2026-10-30 08:36:37 +00:00
• 39d178f629 Expire cooldown rewrites when a withheld version becomes available Simon Chrzanowski 2026-10-30 09:33:56 +01:00
• e0e212942f
  Trim npm attestations doc comments Andrew Nesbitt 2026-10-30 08:29:33 +00:00
• 50e65a31d8
  Serve npm attestations through the proxy Simon Chrzanowski 2026-10-27 16:16:11 +01:00
• e9b74be959
  Merge pull request #633 from simonchrz/perf/rewrite-cache-gzip Andrew Nesbitt 2026-10-29 20:37:24 +00:00
• 58e87c2571 Cache cooldown rewrites for a 24th of the shortest cooldown Simon Chrzanowski 2026-10-29 19:19:12 +01:00
• efe682327c
  Merge pull request #635 from git-pkgs/dependabot/go_modules/github.com/klauspost/compress-1.20.3 simon chrzanowski 2026-10-29 19:05:07 +01:00
• 5288f6ae13
  Merge pull request #637 from git-pkgs/dependabot/go_modules/modernc.org/sqlite-1.61.0 simon chrzanowski 2026-10-29 19:04:42 +01:00
• c9a3a6496d
  Merge pull request #636 from git-pkgs/dependabot/go_modules/github.com/git-pkgs/archives-0.10.0 simon chrzanowski 2026-10-29 19:04:36 +01:00
• 568f4024b5
  Merge pull request #634 from git-pkgs/dependabot/go_modules/github.com/git-pkgs/magic-0.6.0 simon chrzanowski 2026-10-29 19:04:30 +01:00
• b31ee702a5
  Bump modernc.org/sqlite from 1.60.1 to 1.61.0 dependabot[bot] 2026-10-29 15:14:31 +00:00
• 359ba32866
  Bump github.com/git-pkgs/archives from 0.9.0 to 0.10.0 dependabot[bot] 2026-10-29 15:14:22 +00:00
• ce60611391
  Bump github.com/klauspost/compress from 1.20.1 to 1.20.3 dependabot[bot] 2026-10-29 15:14:17 +00:00
• 96bd0f4a59
  Bump github.com/git-pkgs/magic from 0.5.0 to 0.6.0 dependabot[bot] 2026-10-29 15:13:56 +00:00
• 10bc2f3309 Keep rewritten metadata gzip-only and longer with cooldown Simon Chrzanowski 2026-10-29 10:52:39 +01:00
• bafc25c999 Add --latest to mirror only the newest version Simon Chrzanowski 2026-10-28 19:01:50 +01:00
• 28ce5f49fc
  Make the slow-client storage failure test deterministic Andrew Nesbitt 2026-10-28 15:57:06 +00:00
• c38e683a23 Make the slow-client storage failure test deterministic Simon Chrzanowski 2026-10-28 16:37:56 +01:00
• 2ea13b00d6 Show cooldown only for ecosystems that apply it Simon Chrzanowski 2026-10-28 16:25:08 +01:00
• f4423ab956
  Move the PURL's mirror name and qualifiers out of Enumerate Simon Chrzanowski 2026-10-27 11:07:45 +01:00
• db8a60e175
  Drop the Homebrew sibling formulae filter Simon Chrzanowski 2026-10-26 16:57:00 +01:00
• 2a8ceb9389
  Mirror Homebrew bottles Simon Chrzanowski 2026-10-25 21:21:19 +01:00
• 842fa21c0a
  Fetch archived CRAN versions unchecked and drop the version dedup Simon Chrzanowski 2026-10-26 16:42:08 +01:00
• 3fd79ccb36
  Fuzz the PACKAGES.rds decoder Simon Chrzanowski 2026-10-25 19:44:07 +01:00
• f5251d3834
  Mirror CRAN source packages Simon Chrzanowski 2026-10-25 19:40:13 +01:00
• 5741791c7c
  Merge pull request #628 from git-pkgs/bump-registries-v0.12.0 Andrew Nesbitt 2026-10-28 15:10:14 +00:00
• 1c4b9d9994
  Merge pull request #621 from simonchrz/feat/go-vulndb Andrew Nesbitt 2026-10-28 13:45:46 +00:00
• 9374437960
  Bump git-pkgs/registries to v0.12.0 Andrew Nesbitt 2026-10-28 13:45:11 +00:00
• 9240f9edef Keep the upstream Composer index in memory Simon Chrzanowski 2026-10-28 14:10:48 +01:00
• 32406d69cd Merge remote-tracking branch 'origin/main' into feat/composer-advisories Simon Chrzanowski 2026-10-28 14:07:39 +01:00
• 7a3b79b10a Skip the monthly release while the last one is a draft Simon Chrzanowski 2026-10-28 14:07:33 +01:00
• 58925cadea
  Merge pull request #609 from simonchrz/feat/stream-cache-miss Andrew Nesbitt 2026-10-28 12:59:52 +00:00
• 7eed8bc135
  Refer to govulncheck's -db flag in comments Andrew Nesbitt 2026-10-28 12:58:27 +00:00
• 8d15cdb966
  Merge pull request #618 from simonchrz/feat/cooldown-ui Andrew Nesbitt 2026-10-28 12:58:24 +00:00
• 16bd0e5a59
  Drop FillVersionPublishedAt until it has a caller Andrew Nesbitt 2026-10-28 12:50:57 +00:00
• 626429d337
  Merge pull request #624 from simonchrz/feat/npm-dist-tags Andrew Nesbitt 2026-10-28 12:45:16 +00:00
• 6916e82207
  Merge pull request #611 from simonchrz/feat/mirror-swift Andrew Nesbitt 2026-10-28 12:44:00 +00:00
• 9037d937bf
  Document using proxy in Docker builds Andrew Nesbitt 2026-10-28 11:39:28 +00:00
• 1c706fffd0 Review fixes for the project inventory Simon Chrzanowski 2026-10-27 20:23:14 +01:00
• 8855c86fc5 Match more SBOM names to cached packages Simon Chrzanowski 2026-10-27 20:18:50 +01:00
• b5eec9c696 Drop vulnerability markers from the project inventory Simon Chrzanowski 2026-10-27 20:15:50 +01:00
• bd05533bff Delete projects from the project page Simon Chrzanowski 2026-10-27 19:46:51 +01:00
• 895f22a601 Skip the project's own packages in uploaded SBOMs Simon Chrzanowski 2026-10-27 19:43:43 +01:00
• 0bc0e903f8 Add a project inventory built from uploaded SBOMs Simon Chrzanowski 2026-10-27 19:30:34 +01:00
• 92b1fb20a6 Follow npm and Packagist change feeds to revalidate changed metadata Simon Chrzanowski 2026-10-27 16:31:47 +01:00
• e97d4aa306 Answer npm dist-tag ls from the served packument Simon Chrzanowski 2026-10-27 16:19:14 +01:00
• 1abb8c029a Serve dated snapshots of Alpine APK indexes Simon Chrzanowski 2026-10-27 16:18:26 +01:00
• 29ecb20733 Serve the Go vulnerability database at /go/vulndb Simon Chrzanowski 2026-10-27 16:16:04 +01:00
• b2553ddd49 Pass Composer security advisories and filter lists through Simon Chrzanowski 2026-10-27 16:15:31 +01:00
• b79cd4d14a Show the cooldown configuration in the web UI Simon Chrzanowski 2026-10-27 13:03:42 +01:00
• fb346ae355 Hold an unrecorded object for a client reading its stored copy Simon Chrzanowski 2026-10-27 12:30:12 +01:00
• 4094b0fca9 Create breaking monthly releases as drafts Simon Chrzanowski 2026-10-27 12:16:50 +01:00
• c8be267586 Merge remote-tracking branch 'origin/main' into mirror-swift Simon Chrzanowski 2026-10-27 11:00:10 +01:00
• 4682c1e563
  Merge pull request #616 from kokes/helm-extra-volumes Andrew Nesbitt 2026-10-27 09:04:55 +00:00
• e7f285273e
  Merge pull request #607 from simonchrz/feat/mirror-julia Andrew Nesbitt 2026-10-27 08:47:52 +00:00
• 1887b124cf Add extraVolumes, extraVolumeMounts and extraInitContainers to Helm chart Ondrej Kokes 2026-10-27 08:50:11 +01:00
• 7e2bf15e00 Release a new minor version when breaking changes were merged Simon Chrzanowski 2026-10-26 18:35:17 +01:00
• 9a5e5a2c9a Keep a slow client from holding back a streamed miss Simon Chrzanowski 2026-10-26 16:44:11 +01:00
• 4de0848b18 Merge remote-tracking branch 'origin/main' into feat/stream-cache-miss Simon Chrzanowski 2026-10-26 16:44:11 +01:00
• 8ea75a30a3 Check cached Swift documents against their digest and resolve source PURLs Simon Chrzanowski 2026-10-26 16:43:42 +01:00
• 391c5b709f Index artifacts by filename and shorten Julia comments Simon Chrzanowski 2026-10-26 16:40:15 +01:00
• 58e2258eb9 Merge main into feat/mirror-swift Simon Chrzanowski 2026-10-26 16:38:53 +01:00
• 6bd0cea0fa Merge remote-tracking branch 'origin/main' into feat/mirror-julia Simon Chrzanowski 2026-10-26 16:38:08 +01:00
• 2998a97a4a
  Merge pull request #612 from simonchrz/refactor/npm-portable-metadata Andrew Nesbitt 2026-10-26 10:58:30 +00:00
• 2334a51a52
  Merge main into feat/mirror-julia Andrew Nesbitt 2026-10-26 10:33:01 +00:00
• fddef8e46e
  Merge pull request #506 from pinguinfuss/issue-467-atomic-queue Andrew Nesbitt 2026-10-26 10:27:24 +00:00
• 61df321331
  Merge pull request #606 from simonchrz/feat/mirror-helm Andrew Nesbitt 2026-10-26 10:26:53 +00:00
• 6bbccd600d
  Merge pull request #604 from simonchrz/perf/cooldown-metadata-cache Andrew Nesbitt 2026-10-26 10:25:46 +00:00
• 257d159ecf
  Release an unrecorded object's hold only once per reader Andrew Nesbitt 2026-10-26 10:19:24 +00:00
• 5953af9b05 Merge main. Main now records UpsertArtifact and its queue entry in one transaction itself, so that part of this branch is gone; ClearArtifactCache, eviction and the unrecorded refetch remain, and an unrecorded refetch counts as failed for instances waiting on its lease. Christian Heim 2026-10-26 08:57:26 +01:00
• 24acee2731 When a refetched file can be neither recorded nor queued for deletion, it is still served to everyone sharing the fetch and deleted once the last of them has closed it, so it no longer stays in storage with nothing pointing at it. A record that committed despite the reported error keeps its file. Christian Heim 2026-10-26 08:49:50 +01:00
• e070618021 Move abbreviated packument detection into internal/metadata/npm Simon Chrzanowski 2026-10-25 22:19:37 +01:00
• 8ed0edb90a Extract portable npm metadata transformations Andrew Nesbitt 2026-10-25 22:19:24 +01:00
• 673a581f9e Mirror Swift registry releases Simon Chrzanowski 2026-10-25 21:48:59 +01:00
• 2fed8901ae Send artifacts to the client while a cache miss is stored Simon Chrzanowski 2026-10-25 20:29:03 +01:00
• a7fa07ffdb Merge main into feat/mirror-julia Simon Chrzanowski 2026-10-25 19:40:38 +01:00
• c72e18f35c Merge main into feat/mirror-helm Simon Chrzanowski 2026-10-25 19:38:45 +01:00
• 3f83d9c0ce Mirror Julia packages Simon Chrzanowski 2026-10-25 19:37:46 +01:00
• 17e4fc763f Mirror Helm charts Simon Chrzanowski 2026-10-25 19:37:22 +01:00
• f8ee4c15b2 Merge main into perf/cooldown-metadata-cache Simon Chrzanowski 2026-10-25 19:37:00 +01:00
• 05ad702a65
  Merge pull request #595 from simonchrz/feat/git-lfs-cache Andrew Nesbitt 2026-10-25 18:32:30 +00:00
• bcda24e15c
  Document timeouts for large LFS objects Simon Chrzanowski 2026-10-25 16:53:11 +01:00
• fe4be3ccd6
  Reuse batch download URLs and stored copies for LFS objects Simon Chrzanowski 2026-10-25 16:46:40 +01:00
• 371cefa889
  Harden the Git LFS cache Simon Chrzanowski 2026-10-25 16:08:15 +01:00
• 605e27d69a
  Cache Git LFS objects Simon Chrzanowski 2026-10-25 14:57:49 +01:00
• 14a253426b Merge main into perf/cooldown-metadata-cache Simon Chrzanowski 2026-10-25 19:17:18 +01:00
• 91d0df7141
  Merge pull request #603 from simonchrz/perf/sqlite-read-pool Andrew Nesbitt 2026-10-25 18:16:26 +00:00
• 3c2449e753
  Merge pull request #601 from simonchrz/perf/shared-rate-limit-holds Andrew Nesbitt 2026-10-25 18:15:55 +00:00
• ab6040743d
  Merge pull request #600 from simonchrz/perf/helm-pypi-rewrite-cache Andrew Nesbitt 2026-10-25 18:15:25 +00:00
• 6288e6162d
  Merge pull request #599 from simonchrz/perf/oci-tag-head-revalidation Andrew Nesbitt 2026-10-25 18:15:01 +00:00
• c5b8088a48
  Merge pull request #598 from simonchrz/perf/immutable-metadata Andrew Nesbitt 2026-10-25 18:14:33 +00:00
• 9360117837
  Merge pull request #597 from simonchrz/perf/memory-quick-wins Andrew Nesbitt 2026-10-25 18:14:03 +00:00
• c17a01c214
  Merge pull request #594 from simonchrz/feat/mirror-composer-archive Andrew Nesbitt 2026-10-25 18:13:15 +00:00
• b5b36dc3af
  Merge pull request #593 from simonchrz/feat/mirror-conda Andrew Nesbitt 2026-10-25 18:12:45 +00:00
• 17ab4bbc3c
  Merge pull request #602 from simonchrz/perf/hot-path-small-fixes Andrew Nesbitt 2026-10-25 18:12:10 +00:00