{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":327775269,"defaultBranch":"master","name":"osv.dev","ownerLogin":"google","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2021-01-08T02:14:10.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/1342004?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1715214459.0","currentOid":""},"activityList":{"items":[{"before":"f67f7460b9b69e693f3746333fe17e7eff1d3f51","after":"dd79353803efadc90f520043873d5dca95a7fb96","ref":"refs/heads/master","pushedAt":"2024-05-10T04:59:49.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"Do not process OSS Fuzz in delete-only mode (#2200)\n\nI noticed this was not behaving as intended during manual dry-run\r\ntesting in Production.","shortMessageHtmlLink":"Do not process OSS Fuzz in delete-only mode (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2288917800\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2200\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2200/hovercard\" href=\"https://github.com/google/osv.dev/pull/2200\">#2200</a>)"}},{"before":"0dad37e386ff6cd0e8210efe83829f6be43887fc","after":"f67f7460b9b69e693f3746333fe17e7eff1d3f51","ref":"refs/heads/master","pushedAt":"2024-05-10T04:20:52.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"Normalize GitHub repos to lowercase (#2199)\n\nProblem: #2182 made checks for existing commits case-insensitive by\r\nrepo, but left the underlying repo string alone. There are a lot of\r\nmixed-case GitHub repos in existence, because `cves.extractGitCommit()`\r\ntakes the repo verbatim.\r\n\r\n`vulns.AddPkgInfo()` aggregates events by repo, case insensitively, so\r\nwas producing incorrect GIT events.\r\n\r\nGitHub repo names are known to be case insensitive, so this is safe for\r\nthem. It's definitively less safe for other URLs, so limit to just them\r\nfor now.","shortMessageHtmlLink":"Normalize GitHub repos to lowercase (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2288871512\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2199\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2199/hovercard\" href=\"https://github.com/google/osv.dev/pull/2199\">#2199</a>)"}},{"before":"149934ba46f21fa53bcfa03f8d94601d96d7e710","after":"0dad37e386ff6cd0e8210efe83829f6be43887fc","ref":"refs/heads/master","pushedAt":"2024-05-10T02:48:13.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"oliverchang","name":"Oliver Chang","path":"/oliverchang","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/759062?s=80&v=4"},"commit":{"message":"Add OSV scanner and GitHub actions to home page (#2136)\n\nThis change adds:\r\n- two code boxes to display usage example for `osv-scanner fix` for both\r\nbasic(non-interactive) and advanced (interactive) use cases.\r\n- Adds a new section to display information about Github Actions Tools\r\n- Adds a button on top of the Home page to point to the Github Action\r\nsection\r\n\r\nresolves https://github.com/google/osv.dev/issues/2085\r\n\r\n\r\nhttps://github.com/google/osv.dev/assets/73332835/13da2482-8ca4-4fea-9644-1e3c8327fd88\r\n\r\n<img width=\"906\" alt=\"Screenshot 2024-04-24 at 8 32 19 pm\"\r\nsrc=\"https://github.com/google/osv.dev/assets/73332835/9326f6a9-c3c1-45c7-b71c-9f2835013aef\">","shortMessageHtmlLink":"Add OSV scanner and GitHub actions to home page (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2261064614\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2136\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2136/hovercard\" href=\"https://github.com/google/osv.dev/pull/2136\">#2136</a>)"}},{"before":"7da1d75c9d8974c16706d3ff5d13e9dda8e61115","after":"149934ba46f21fa53bcfa03f8d94601d96d7e710","ref":"refs/heads/master","pushedAt":"2024-05-10T02:44:04.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"oliverchang","name":"Oliver Chang","path":"/oliverchang","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/759062?s=80&v=4"},"commit":{"message":"Update the title to display summary instead of id (#2137)\n\nPrior to this change, in the vulnerability page, id of the vulnerability\r\nwas displayed as title.\r\n\r\nThis change updates the title to display the human readable summary for\r\nthe title, and adds ID as an data description.\r\n\r\nresolves #2078\r\n\r\nexample 1 - Before:\r\n<img width=\"1537\" alt=\"before1\"\r\nsrc=\"https://github.com/google/osv.dev/assets/73332835/d4cef963-b8a4-46c6-862f-11cabbc57263\">\r\n\r\nAfter:\r\n<img width=\"1235\" alt=\"after1\"\r\nsrc=\"https://github.com/google/osv.dev/assets/73332835/2c3c2eef-4c28-4bac-9630-6d37d85fbbe0\">\r\n\r\n\r\n\r\nExample 2 - Before:\r\n![Screenshot 2024-04-26 at 3 40\r\n44 pm](https://github.com/google/osv.dev/assets/73332835/57c211d2-1bb9-4499-8729-5b051952b927)\r\n\r\n\r\nAfter:\r\n<img width=\"1229\" alt=\"after2\"\r\nsrc=\"https://github.com/google/osv.dev/assets/73332835/2c17af73-4554-4fbf-816f-e8c5cc8f6802\">","shortMessageHtmlLink":"Update the title to display summary instead of id (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2265063239\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2137\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2137/hovercard\" href=\"https://github.com/google/osv.dev/pull/2137\">#2137</a>)"}},{"before":"af3d8c3ac76e427642f6c5ddfa8b0e4b458a29b1","after":"7da1d75c9d8974c16706d3ff5d13e9dda8e61115","ref":"refs/heads/master","pushedAt":"2024-05-10T01:05:10.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hogo6002","name":"Holly Gong","path":"/hogo6002","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/39108850?s=80&v=4"},"commit":{"message":"Fix modified time of nvd part entries (#2196)\n\nThe `gcloud storage rsync --checksums-only` command always updates the\r\nmodified time on GCS objects once a file has been touched, even if the\r\nfile content remains the same. Updates it to `gsutil rsync` command to\r\nkeep the original modified time on GCS objects when nothing has been\r\nchanged.","shortMessageHtmlLink":"Fix modified time of nvd part entries (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2287019337\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2196\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2196/hovercard\" href=\"https://github.com/google/osv.dev/pull/2196\">#2196</a>)"}},{"before":"75a92abb22c24eea98456951970a7d26c3457dd1","after":"af3d8c3ac76e427642f6c5ddfa8b0e4b458a29b1","ref":"refs/heads/master","pushedAt":"2024-05-09T05:11:51.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"Retry all remaining GCS operations that may intermittently fail (#2185)\n\nIn the same spirit of what was done in #2046 and #2049\r\n\r\nRecently saw a transient 502 error in Production from the importer that\r\nwould have benefited from this, and decided to look more broadly for any\r\nother situations where this could crop up in the future...","shortMessageHtmlLink":"Retry all remaining GCS operations that may intermittently fail (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2286760310\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2185\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2185/hovercard\" href=\"https://github.com/google/osv.dev/pull/2185\">#2185</a>)"}},{"before":"213dd5a0aca0cfec7751ab7363d14bcadd3e20a7","after":"75a92abb22c24eea98456951970a7d26c3457dd1","ref":"refs/heads/master","pushedAt":"2024-05-09T03:50:49.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"Add a convenience redirect to ecosystems.txt (#1967)\n\nInspired by a request from Dave Tamasi regarding current ecosystems, I\r\nwanted a quicker, easier way to get to `ecosystems.txt`\r\n\r\nAlso update documentation to better match current `ecosystems.txt`\r\n\r\n(\"it's complicated\" with respect to Python (PSF) and GSD and UVI are not\r\nincluded at https://osv.dev/list)","shortMessageHtmlLink":"Add a convenience redirect to ecosystems.txt (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2119858428\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/1967\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/1967/hovercard\" href=\"https://github.com/google/osv.dev/pull/1967\">#1967</a>)"}},{"before":"8f6e7f82ff005fdf324a0497543f612e78fa0aba","after":"213dd5a0aca0cfec7751ab7363d14bcadd3e20a7","ref":"refs/heads/master","pushedAt":"2024-05-09T03:25:18.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hogo6002","name":"Holly Gong","path":"/hogo6002","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/39108850?s=80&v=4"},"commit":{"message":"Relaunch \"Update last modified time of combine-to-osv entries\" (#2165)\n\nSame as https://github.com/google/osv.dev/pull/2158\r\nMerge after weekly release and\r\nhttps://github.com/google/osv.dev/pull/2164","shortMessageHtmlLink":"Relaunch \"Update last modified time of combine-to-osv entries\" (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2282252795\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2165\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2165/hovercard\" href=\"https://github.com/google/osv.dev/pull/2165\">#2165</a>)"}},{"before":"afcc49c52bbd1c6604baaa3a12809a30d5d3ad34","after":"8f6e7f82ff005fdf324a0497543f612e78fa0aba","ref":"refs/heads/master","pushedAt":"2024-05-09T01:01:42.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"another-rex","name":"Rex P","path":"/another-rex","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/106129829?s=80&v=4"},"commit":{"message":"Add parallel exporter (#2167)\n\nExporter currently take too long to complete (around 1 hour and 10\r\nminutes), and will only get longer to run as the OSV database expands.\r\n\r\nThis change parallelizes the exporter along each ecosystem, separating\r\nthe ecosystem export portion of the script from the selection of each\r\necosystem. This roughly reduced the time taken down to how long the\r\nlongest ecosystem takes to export, 13 minutes or so.","shortMessageHtmlLink":"Add parallel exporter (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2282311420\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2167\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2167/hovercard\" href=\"https://github.com/google/osv.dev/pull/2167\">#2167</a>)"}},{"before":"cf560c731b6324f249313e40afb8ead3188d712d","after":"afcc49c52bbd1c6604baaa3a12809a30d5d3ad34","ref":"refs/heads/master","pushedAt":"2024-05-08T23:54:42.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"Search for existing commits case-insensitively (#2182)\n\nAlso stop looking once one's been found.\r\n\r\nWhile eyeballing the cleanup in staging I noticed some records being\r\ndeleted that were not expected, and it was because they had previous\r\nconverted when they only had commit references, but then didn't once\r\nthey had versions and the commit references, due to this\r\ncase-sensitivity mishandling the situation.","shortMessageHtmlLink":"Search for existing commits case-insensitively (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2285085334\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2182\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2182/hovercard\" href=\"https://github.com/google/osv.dev/pull/2182\">#2182</a>)"}},{"before":"ec8be328391507a26d6d2ffff38676c0241d7b3e","after":"cf560c731b6324f249313e40afb8ead3188d712d","ref":"refs/heads/master","pushedAt":"2024-05-08T05:05:09.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"another-rex","name":"Rex P","path":"/another-rex","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/106129829?s=80&v=4"},"commit":{"message":"Update Go to 1.22.3 (#2179)","shortMessageHtmlLink":"Update Go to 1.22.3 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2284670510\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2179\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2179/hovercard\" href=\"https://github.com/google/osv.dev/pull/2179\">#2179</a>)"}},{"before":"2b501b170a20864c217067874fac0c02b0201210","after":"ec8be328391507a26d6d2ffff38676c0241d7b3e","ref":"refs/heads/master","pushedAt":"2024-05-08T04:00:09.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"another-rex","name":"Rex P","path":"/another-rex","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/106129829?s=80&v=4"},"commit":{"message":"Bump npm version to v8.19.4 (#2175)\n\nBump up the npm version to v8.19.4 from v8.5.1 . This allows npm to\r\nbuild the frontend correctly, since as of v8.5.2 integrity checks are\r\nnot performed on git remotes (the hash is not stable between npm\r\nversions).\r\n\r\nCo-authored-by: Andrew Pollock <andrewpollock@users.noreply.github.com>","shortMessageHtmlLink":"Bump npm version to v8.19.4 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2284599537\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2175\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2175/hovercard\" href=\"https://github.com/google/osv.dev/pull/2175\">#2175</a>)"}},{"before":"2f097da3efe4b646b16abb766a23abc5f3399756","after":"2b501b170a20864c217067874fac0c02b0201210","ref":"refs/heads/master","pushedAt":"2024-05-08T03:59:55.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"another-rex","name":"Rex P","path":"/another-rex","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/106129829?s=80&v=4"},"commit":{"message":"Update Go version to 1.22.2 (#2174)\n\nThis resolves the vulnerabilities reported on Go 1.22.1.","shortMessageHtmlLink":"Update Go version to 1.22.2 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2284521360\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2174\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2174/hovercard\" href=\"https://github.com/google/osv.dev/pull/2174\">#2174</a>)"}},{"before":"5aa965356544778caf13c2761b3344fbe662771b","after":"2f097da3efe4b646b16abb766a23abc5f3399756","ref":"refs/heads/master","pushedAt":"2024-05-08T02:52:16.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"tools/datafix: update idna in Pipfile.lock (#2173)\n\nResolves https://osv.dev/vulnerability/GHSA-jjg7-2v4v-x38h","shortMessageHtmlLink":"tools/datafix: update idna in Pipfile.lock (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2284470413\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2173\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2173/hovercard\" href=\"https://github.com/google/osv.dev/pull/2173\">#2173</a>)"}},{"before":"ed63121ef55c84127cb5137dc0a650e7cb302571","after":null,"ref":"refs/heads/cuixq-update-idna","pushedAt":"2024-05-08T02:52:16.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"}},{"before":"e122d60244887333bf5cdb93e0631730d0b7cbfc","after":"ed63121ef55c84127cb5137dc0a650e7cb302571","ref":"refs/heads/cuixq-update-idna","pushedAt":"2024-05-08T01:27:09.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"cuixq","name":"Xueqin Cui","path":"/cuixq","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/72771658?s=80&v=4"},"commit":{"message":"Update Pipfile.lock","shortMessageHtmlLink":"Update Pipfile.lock"}},{"before":null,"after":"e122d60244887333bf5cdb93e0631730d0b7cbfc","ref":"refs/heads/cuixq-update-idna","pushedAt":"2024-05-08T01:01:00.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"cuixq","name":"Xueqin Cui","path":"/cuixq","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/72771658?s=80&v=4"},"commit":{"message":"tools/datafix: update idna in Pipfile.lock","shortMessageHtmlLink":"tools/datafix: update idna in Pipfile.lock"}},{"before":"983a60f80cd0b40df4a3e13b14118cdd24b1530e","after":"5aa965356544778caf13c2761b3344fbe662771b","ref":"refs/heads/master","pushedAt":"2024-05-08T00:44:00.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"Add a second importer cronjob to run in delete mode (#2133)\n\nThis runs the code introduced in #2030 that takes many hours to complete\r\nand isn't practical to run inline with regular imports.\r\n\r\nAddresses #1467","shortMessageHtmlLink":"Add a second importer cronjob to run in delete mode (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2260475010\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2133\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2133/hovercard\" href=\"https://github.com/google/osv.dev/pull/2133\">#2133</a>)"}},{"before":"848262b3fd1b4cc70d0f98fc63a1f136c46ede92","after":"983a60f80cd0b40df4a3e13b14118cdd24b1530e","ref":"refs/heads/master","pushedAt":"2024-05-08T00:25:41.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"another-rex","name":"Rex P","path":"/another-rex","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/106129829?s=80&v=4"},"commit":{"message":"chore(deps): lock file maintenance appengine-frontend (#2171)\n\n[![Mend\r\nRenovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)\r\n\r\nThis PR contains the following updates:\r\n\r\n| Package | Type | Update | Change | Age | Adoption | Passing |\r\nConfidence |\r\n|---|---|---|---|---|---|---|---|\r\n|  |  | lockFileMaintenance | All locks refreshed |  |  |  |  |\r\n| [sass](https://togithub.com/sass/dart-sass) | devDependencies | minor\r\n| [`1.76.0` ->\r\n`1.77.0`](https://renovatebot.com/diffs/npm/sass/1.76.0/1.77.0) |\r\n[![age](https://developer.mend.io/api/mc/badges/age/npm/sass/1.77.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)\r\n|\r\n[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/sass/1.77.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)\r\n|\r\n[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/sass/1.76.0/1.77.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)\r\n|\r\n[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/sass/1.76.0/1.77.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)\r\n|\r\n\r\n🔧 This Pull Request updates lock files to use the latest dependency\r\nversions.\r\n\r\n---\r\n\r\n### Release Notes\r\n\r\n<details>\r\n<summary>sass/dart-sass (sass)</summary>\r\n\r\n###\r\n[`v1.77.0`](https://togithub.com/sass/dart-sass/blob/HEAD/CHANGELOG.md#1770)\r\n\r\n[Compare\r\nSource](https://togithub.com/sass/dart-sass/compare/1.76.0...1.77.0)\r\n\r\n-   *Don't* throw errors for at-rules in keyframe blocks.\r\n\r\n</details>\r\n\r\n---\r\n\r\n### Configuration\r\n\r\n📅 **Schedule**: Branch creation - \"before 6am on wednesday\" in timezone\r\nAustralia/Sydney, Automerge - At any time (no schedule defined).\r\n\r\n🚦 **Automerge**: Disabled by config. Please merge this manually once you\r\nare satisfied.\r\n\r\n♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the\r\nrebase/retry checkbox.\r\n\r\n👻 **Immortal**: This PR will be recreated if closed unmerged. Get\r\n[config help](https://togithub.com/renovatebot/renovate/discussions) if\r\nthat's undesired.\r\n\r\n---\r\n\r\n- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check\r\nthis box\r\n\r\n---\r\n\r\nThis PR has been generated by [Mend\r\nRenovate](https://www.mend.io/free-developer-tools/renovate/). View\r\nrepository job log\r\n[here](https://developer.mend.io/github/google/osv.dev).\r\n\r\n<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNDAuMTAiLCJ1cGRhdGVkSW5WZXIiOiIzNy4zNDAuMTAiLCJ0YXJnZXRCcmFuY2giOiJtYXN0ZXIiLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->","shortMessageHtmlLink":"chore(deps): lock file maintenance appengine-frontend (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2284032490\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2171\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2171/hovercard\" href=\"https://github.com/google/osv.dev/pull/2171\">#2171</a>)"}},{"before":"5e8ef032c9e710399982a15b9ed7f49ca987db30","after":"848262b3fd1b4cc70d0f98fc63a1f136c46ede92","ref":"refs/heads/master","pushedAt":"2024-05-07T05:40:42.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"Return early when there's nothing to delete (#2166)\n\nThis way a deliberate threshold of zero doesn't cause a misfire.","shortMessageHtmlLink":"Return early when there's nothing to delete (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2282306750\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2166\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2166/hovercard\" href=\"https://github.com/google/osv.dev/pull/2166\">#2166</a>)"}},{"before":"4b580ae7972e7da4f0323988b26b12fcc65efe4a","after":"5e8ef032c9e710399982a15b9ed7f49ca987db30","ref":"refs/heads/master","pushedAt":"2024-05-07T04:40:46.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"Sort the AffectedCommits (#2164)\n\nInstability in this data structure adds unnecessary noise.\r\n\r\nThere is currently the potential for variability in the output, which is\r\nresulting in unnecessary file copying to GCS (because the checksum of\r\nthe file changes), and we're trying to get the true modification time of\r\na resultant OSV record to reflect that of the newest constituent input\r\npart to `combine-to-osv`.\r\n\r\nBefore (for CVE-2016-0502):\r\n\r\n```\r\n[\r\n  {\r\n    \"fixed_version\": {\r\n      \"affect_commits\": [\r\n        {\r\n          \"repo\": \"https://github.com/mysql/mysql-server\",\r\n          \"introduced\": \"54df0057e18d8c82c23fbd4e0bf5b5dc2e762955\"\r\n        },\r\n        {\r\n          \"repo\": \"https://github.com/mysql/mysql-server\",\r\n          \"fixed\": \"020dcec4a12e61cf5853623a2cd7b06d6bdb351f\"\r\n        },\r\n        {\r\n          \"repo\": \"https://github.com/mariadb/server\",\r\n          \"introduced\": \"5bfe1a3917ee1bddc7f2cde0c88961875148873c\"\r\n        },\r\n        {\r\n          \"repo\": \"https://github.com/mariadb/server\",\r\n          \"fixed\": \"c0c9b92e37d572cc4452970c81199367048ea198\"\r\n        },\r\n        {\r\n          \"repo\": \"https://github.com/mariadb/server\",\r\n          \"introduced\": \"776555af021e917ce0d6235386b43ae59fdd5161\"\r\n        }\r\n      ]\r\n    }\r\n  }\r\n]\r\n```\r\n\r\nAfter (for CVE-2016-0502):\r\n\r\n```\r\n[\r\n  {\r\n    \"fixed_version\": {\r\n      \"affect_commits\": [\r\n        {\r\n          \"repo\": \"https://github.com/mariadb/server\",\r\n          \"introduced\": \"5bfe1a3917ee1bddc7f2cde0c88961875148873c\"\r\n        },\r\n        {\r\n          \"repo\": \"https://github.com/mariadb/server\",\r\n          \"introduced\": \"776555af021e917ce0d6235386b43ae59fdd5161\"\r\n        },\r\n        {\r\n          \"repo\": \"https://github.com/mariadb/server\",\r\n          \"fixed\": \"c0c9b92e37d572cc4452970c81199367048ea198\"\r\n        },\r\n        {\r\n          \"repo\": \"https://github.com/mysql/mysql-server\",\r\n          \"introduced\": \"54df0057e18d8c82c23fbd4e0bf5b5dc2e762955\"\r\n        },\r\n        {\r\n          \"repo\": \"https://github.com/mysql/mysql-server\",\r\n          \"fixed\": \"020dcec4a12e61cf5853623a2cd7b06d6bdb351f\"\r\n        }\r\n      ]\r\n    }\r\n  }\r\n]\r\n```","shortMessageHtmlLink":"Sort the AffectedCommits (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2282233973\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2164\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2164/hovercard\" href=\"https://github.com/google/osv.dev/pull/2164\">#2164</a>)"}},{"before":"167f4e6825a414af01e75365d3c87525a214a550","after":null,"ref":"refs/heads/another-rex-patch-1","pushedAt":"2024-05-07T01:55:46.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"another-rex","name":"Rex P","path":"/another-rex","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/106129829?s=80&v=4"}},{"before":"c237543f5cd88a9c995deec4838b0acf37af0d4f","after":"4b580ae7972e7da4f0323988b26b12fcc65efe4a","ref":"refs/heads/master","pushedAt":"2024-05-07T01:55:45.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"another-rex","name":"Rex P","path":"/another-rex","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/106129829?s=80&v=4"},"commit":{"message":"Update renovate.json (#2163)\n\nGet lockfile maintenance to run on the same schedule as everything else\r\nso _all_ the PRs come out on the desired schedule","shortMessageHtmlLink":"Update renovate.json (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2282109767\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2163\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2163/hovercard\" href=\"https://github.com/google/osv.dev/pull/2163\">#2163</a>)"}},{"before":"e9f54cb2fda9cf61d179d1485a0c0aa8f21bf901","after":null,"ref":"refs/heads/revert-2158-cve_modified","pushedAt":"2024-05-07T01:54:10.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"another-rex","name":"Rex P","path":"/another-rex","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/106129829?s=80&v=4"}},{"before":"7145a9c1347542e3bfa364bfd77c1a1b27c1956b","after":"c237543f5cd88a9c995deec4838b0acf37af0d4f","ref":"refs/heads/master","pushedAt":"2024-05-07T01:54:09.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"another-rex","name":"Rex P","path":"/another-rex","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/106129829?s=80&v=4"},"commit":{"message":"Revert \"Update last modified time of combine-to-osv entries\" (#2162)\n\nReverts google/osv.dev#2158","shortMessageHtmlLink":"Revert \"Update last modified time of combine-to-osv entries\" (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2282106162\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2162\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2162/hovercard\" href=\"https://github.com/google/osv.dev/pull/2162\">#2162</a>)"}},{"before":null,"after":"167f4e6825a414af01e75365d3c87525a214a550","ref":"refs/heads/another-rex-patch-1","pushedAt":"2024-05-07T01:47:32.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"another-rex","name":"Rex P","path":"/another-rex","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/106129829?s=80&v=4"},"commit":{"message":"Update renovate.json","shortMessageHtmlLink":"Update renovate.json"}},{"before":null,"after":"e9f54cb2fda9cf61d179d1485a0c0aa8f21bf901","ref":"refs/heads/revert-2158-cve_modified","pushedAt":"2024-05-07T01:43:25.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"hogo6002","name":"Holly Gong","path":"/hogo6002","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/39108850?s=80&v=4"},"commit":{"message":"Revert \"Update last modified time of combine-to-osv entries (#2158)\"\n\nThis reverts commit fd8f8fc1ce78677d630811d7edc629e8aa7627ab.","shortMessageHtmlLink":"Revert \"Update last modified time of combine-to-osv entries (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2279880233\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2158\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2158/hovercard\" href=\"https://github.com/google/osv.dev/pull/2158\">#2158</a>)\""}},{"before":"30a3c8e8bc8ad4dad19f649a7508981445d72c0d","after":"7145a9c1347542e3bfa364bfd77c1a1b27c1956b","ref":"refs/heads/master","pushedAt":"2024-05-07T00:55:18.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"another-rex","name":"Rex P","path":"/another-rex","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/106129829?s=80&v=4"},"commit":{"message":"Add RSS link to the page (#2115)\n\nThis PR introduces a rss link to the site.\r\n\r\nIssue: #1048 \r\n\r\ni'm not quite sure about if we should just add a link tag or display a\r\nRSS icon beside the Github icon at the top right corner:\r\n<img width=\"75\" alt=\"image\"\r\nsrc=\"https://github.com/google/osv.dev/assets/13760813/a875c91e-b62c-47c0-ae13-61380200fa6f\">\r\nor maybe we want both of them? Please let me know your suggestion.","shortMessageHtmlLink":"Add RSS link to the page (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2249566122\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2115\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2115/hovercard\" href=\"https://github.com/google/osv.dev/pull/2115\">#2115</a>)"}},{"before":"fd8f8fc1ce78677d630811d7edc629e8aa7627ab","after":"30a3c8e8bc8ad4dad19f649a7508981445d72c0d","ref":"refs/heads/master","pushedAt":"2024-05-07T00:52:52.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"Fix threshold type bug (#2161)\n\nThe threshold was being set as string, and needed to be a float. Also\r\nadd type hints.","shortMessageHtmlLink":"Fix threshold type bug (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2281981953\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2161\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2161/hovercard\" href=\"https://github.com/google/osv.dev/pull/2161\">#2161</a>)"}},{"before":"06c88f0cfc5365d5375bd3f16c10db83326c4ce0","after":"fd8f8fc1ce78677d630811d7edc629e8aa7627ab","ref":"refs/heads/master","pushedAt":"2024-05-07T00:51:33.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"another-rex","name":"Rex P","path":"/another-rex","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/106129829?s=80&v=4"},"commit":{"message":"Update last modified time of combine-to-osv entries (#2158)\n\nFixes https://github.com/google/osv.dev/issues/2103\r\n\r\nThe current `modfied` time of a combine-to-osv entry only reflects the\r\nCVE modified time without checking if any `parts` has been changed.\r\nUpdates code to set the `modified` field to the most recent modification\r\ntime of parts' components or the original CVE entry.\r\n\r\n- Uses `os.Stat(file).ModTime()` to check the last modified time of each\r\npart.\r\n- Maintains a map to record the most recent modification of each part\r\nfile associated with each CVE ID.\r\n- Updates `PackageInfo`'s `modified` field if the part modified time is\r\nlater than the original CVE's modified time.\r\n\r\nIt may not be the best implementation, but its failure wouldn't affect\r\nthe logic of any existing code.","shortMessageHtmlLink":"Update last modified time of combine-to-osv entries (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2279880233\" data-permission-text=\"Title is private\" data-url=\"https://github.com/google/osv.dev/issues/2158\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/google/osv.dev/pull/2158/hovercard\" href=\"https://github.com/google/osv.dev/pull/2158\">#2158</a>)"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAERjsZ2QA","startCursor":null,"endCursor":null}},"title":"Activity · google/osv.dev"}