{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":51868010,"defaultBranch":"main","name":"bubblewrap","ownerLogin":"containers","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2016-02-16T20:36:10.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/5874934?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1711489719.0","currentOid":""},"activityList":{"items":[{"before":"041e3c50856c40c7eadef44a859b2a0d401aa9a7","after":"8e51677abd7e3338e4952370bf7d902e37d8cbb6","ref":"refs/heads/main","pushedAt":"2024-03-26T21:48:39.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"Prepare v0.9.0\n\nSigned-off-by: Simon McVittie ","shortMessageHtmlLink":"Prepare v0.9.0"}},{"before":"8653799bb690e8a06f3c78a1974be1416e3a602c","after":"041e3c50856c40c7eadef44a859b2a0d401aa9a7","ref":"refs/heads/main","pushedAt":"2024-03-26T20:45:59.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"Merge pull request #624 from smcv/ssize-max\n\nutils: Don't let ssize_t overflow when reading very large files","shortMessageHtmlLink":"Merge pull request #624 from smcv/ssize-max"}},{"before":"f4c7e48870d73eadc7ad5ace23941cd16171ad94","after":"8653799bb690e8a06f3c78a1974be1416e3a602c","ref":"refs/heads/main","pushedAt":"2024-03-20T17:21:19.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"release-checklist: Plan to make future releases with meson dist","shortMessageHtmlLink":"release-checklist: Plan to make future releases with meson dist"}},{"before":"7fe0996b773f2744e0bd8ffff46bfda46e7e1fb2","after":"f4c7e48870d73eadc7ad5ace23941cd16171ad94","ref":"refs/heads/main","pushedAt":"2024-02-15T14:46:11.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"Merge pull request #623 from smcv/codeql\n\nworkflows: Upgrade codeql-action to v2","shortMessageHtmlLink":"Merge pull request #623 from smcv/codeql"}},{"before":"65a19f273fdb77c656e56cd02cdfe9f756b1ec3c","after":"7fe0996b773f2744e0bd8ffff46bfda46e7e1fb2","ref":"refs/heads/main","pushedAt":"2024-02-15T14:45:53.000Z","pushType":"pr_merge","commitsCount":4,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"Merge pull request #556 from cgzones/alloc\n\nAllocation improvements","shortMessageHtmlLink":"Merge pull request #556 from cgzones/alloc"}},{"before":"82d6197e90f0eb1a95dfbffd32227b7943a12b70","after":"65a19f273fdb77c656e56cd02cdfe9f756b1ec3c","ref":"refs/heads/main","pushedAt":"2024-02-15T14:39:12.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"Merge pull request #622 from smcv/exeext\n\nSilence Automake warning for items in TESTS being renamed","shortMessageHtmlLink":"Merge pull request #622 from smcv/exeext"}},{"before":"623780a35bfc06641c92f3c3cbb05760ead1a17a","after":"82d6197e90f0eb1a95dfbffd32227b7943a12b70","ref":"refs/heads/main","pushedAt":"2024-02-15T14:17:51.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"Merge pull request #621 from smcv/readme-sandbox-limitations\n\nDocument some potential pitfalls in sandboxing","shortMessageHtmlLink":"Merge pull request #621 from smcv/readme-sandbox-limitations"}},{"before":"51a818858c10a381b38aecf141be2abe7e99b6d4","after":"623780a35bfc06641c92f3c3cbb05760ead1a17a","ref":"refs/heads/main","pushedAt":"2024-02-05T11:12:16.000Z","pushType":"pr_merge","commitsCount":3,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"Merge pull request #619 from smcv/symlink-idempotent\n\nAdd documentation and test coverage for #577","shortMessageHtmlLink":"Merge pull request #619 from smcv/symlink-idempotent"}},{"before":"4872aefb1d347eef99a92f18cb5b1ed8c3e625da","after":"51a818858c10a381b38aecf141be2abe7e99b6d4","ref":"refs/heads/main","pushedAt":"2024-01-31T16:20:45.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"Merge pull request #577 from jkaivo/main\n\nMake --symlink idempotent","shortMessageHtmlLink":"Merge pull request #577 from jkaivo/main"}},{"before":"5e43e8b1d2aeb50933501271cf7086d03dd2d62f","after":"4872aefb1d347eef99a92f18cb5b1ed8c3e625da","ref":"refs/heads/main","pushedAt":"2024-01-29T12:55:39.000Z","pushType":"pr_merge","commitsCount":3,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"Merge pull request #615 from smcv/mount-enospc\n\nShow a better error message for mount(2) -> ENOSPC","shortMessageHtmlLink":"Merge pull request #615 from smcv/mount-enospc"}},{"before":"7816e0129887c0da3f442244db24edc6e8a029a4","after":"5e43e8b1d2aeb50933501271cf7086d03dd2d62f","ref":"refs/heads/main","pushedAt":"2023-11-02T19:53:46.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"Merge pull request #610 from WhyNotHugo/drop-py34\n\nDrop support for Python<3.4 in demo code","shortMessageHtmlLink":"Merge pull request #610 from WhyNotHugo/drop-py34"}},{"before":"ebfc8ef87fb8d2fedc4c57cda75e324998893efa","after":"7816e0129887c0da3f442244db24edc6e8a029a4","ref":"refs/heads/main","pushedAt":"2023-10-02T09:08:35.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"Merge pull request #603 from quag/nixos-recursive-test-fix\n\nMake test \"can pivot to new rootfs recursively\" work on NixOS","shortMessageHtmlLink":"Merge pull request #603 from quag/nixos-recursive-test-fix"}},{"before":"9cdc26e2d7e130abcfe8a3ee226e7dd65a964c80","after":"ebfc8ef87fb8d2fedc4c57cda75e324998893efa","ref":"refs/heads/main","pushedAt":"2023-10-02T09:07:16.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"Merge pull request #604 from quag/readme-test-add\n\nAdd testing instructions to README.md","shortMessageHtmlLink":"Merge pull request #604 from quag/readme-test-add"}},{"before":"4a7bb29257bf0b1fab246d8f191297b594a6d586","after":"9cdc26e2d7e130abcfe8a3ee226e7dd65a964c80","ref":"refs/heads/main","pushedAt":"2023-10-02T09:06:08.000Z","pushType":"pr_merge","commitsCount":4,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"Merge pull request #602 from quag/ok_done_testing\n\nImplement change proposed in \"All MRs that add unit tests conflict with each other\"","shortMessageHtmlLink":"Merge pull request #602 from quag/ok_done_testing"}},{"before":"97468426beafafc2857ec6ad359e2aec9dd24c2a","after":"4a7bb29257bf0b1fab246d8f191297b594a6d586","ref":"refs/heads/main","pushedAt":"2023-10-01T12:01:46.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"Merge pull request #599 from swick/wip/mnt-symlink-test\n\ntests: Skip test when host /mnt is a symlink","shortMessageHtmlLink":"Merge pull request #599 from swick/wip/mnt-symlink-test"}},{"before":"71aa850bf67770de7ae2b9f2b220d13918a5a19d","after":"97468426beafafc2857ec6ad359e2aec9dd24c2a","ref":"refs/heads/main","pushedAt":"2023-10-01T12:01:38.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"Merge pull request #600 from swick/wip/get-newroot-path\n\nutils: Move get_newroot_path to utils","shortMessageHtmlLink":"Merge pull request #600 from swick/wip/get-newroot-path"}},{"before":"ad76c2d6ba8091a7afa95568e46af2261b362439","after":"71aa850bf67770de7ae2b9f2b220d13918a5a19d","ref":"refs/heads/main","pushedAt":"2023-10-01T11:58:07.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"Merge pull request #598 from quag/argv0\n\nAdd --argv0 option","shortMessageHtmlLink":"Merge pull request #598 from quag/argv0"}},{"before":"d73a78f7ef0bdb5e0a9e1f332c862d68008dec04","after":"ad76c2d6ba8091a7afa95568e46af2261b362439","ref":"refs/heads/main","pushedAt":"2023-05-04T18:30:18.000Z","pushType":"pr_merge","commitsCount":3,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"Merge pull request #554 from smcv/disable-userns-tests-root\n\nFix test failure since #488 when running as uid 0","shortMessageHtmlLink":"Merge pull request #554 from smcv/disable-userns-tests-root"}},{"before":"928638969e475f7a1a5aa6708add7292eb695f03","after":"d73a78f7ef0bdb5e0a9e1f332c862d68008dec04","ref":"refs/heads/main","pushedAt":"2023-05-04T18:27:22.000Z","pushType":"pr_merge","commitsCount":6,"pusher":{"login":"smcv","name":"Simon McVittie","path":"/smcv","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1561141?s=80&v=4"},"commit":{"message":"Merge pull request #559 from cgzones/compiler\n\nFix various compiler warnings","shortMessageHtmlLink":"Merge pull request #559 from cgzones/compiler"}},{"before":"2f9ce900d4cbe51c88d22da144759828ae04d0f0","after":"928638969e475f7a1a5aa6708add7292eb695f03","ref":"refs/heads/main","pushedAt":"2023-04-03T14:01:03.000Z","pushType":"pr_merge","commitsCount":3,"pusher":{"login":"alexlarsson","name":"Alexander Larsson","path":"/alexlarsson","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/990736?s=80&v=4"},"commit":{"message":"bwrap.xml: Get umbrella project back in sync\n\nSigned-off-by: Sebastian Pipping ","shortMessageHtmlLink":"bwrap.xml: Get umbrella project back in sync"}},{"before":"795eeee77eab88afb9db27b06e1d23cc3aebe38e","after":"2f9ce900d4cbe51c88d22da144759828ae04d0f0","ref":"refs/heads/main","pushedAt":"2023-04-03T07:52:37.000Z","pushType":"pr_merge","commitsCount":3,"pusher":{"login":"alexlarsson","name":"Alexander Larsson","path":"/alexlarsson","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/990736?s=80&v=4"},"commit":{"message":"README.md: Mention --new-session in section \"Sandboxing\"\n\nSigned-off-by: Sebastian Pipping ","shortMessageHtmlLink":"README.md: Mention --new-session in section \"Sandboxing\""}},{"before":"da63f2bddb9ce58e0844ac415d4cba388571e1f4","after":"795eeee77eab88afb9db27b06e1d23cc3aebe38e","ref":"refs/heads/main","pushedAt":"2023-03-30T12:34:17.255Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"alexlarsson","name":"Alexander Larsson","path":"/alexlarsson","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/990736?s=80&v=4"},"commit":{"message":"README, SECURITY: Clarify that bubblewrap does not define a security model\n\nbubblewrap can provide a robust security boundary that severely limits\nfunctionality, or it can provide full functionality without any attempt\nat being a security boundary, or anything in between those extremes.\nIf a caller of bubblewrap chooses inappropriate command-line arguments\nfor their desired security model, then bubblewrap will not provide the\nsecurity model they are aiming for, but this is not a bubblewrap\nvulnerability.\n\nApparently this isn't clear to everyone, so try to clarify.\n\nThe one place where bubblewrap *does* define some sort of security\npolicy for itself is when it's setuid root, in which case it's\nresponsible for preventing users from carrying out privilege escalation\nattacks like CVE-2020-5291.\n\nResolves: https://github.com/containers/bubblewrap/issues/555\nSigned-off-by: Simon McVittie ","shortMessageHtmlLink":"README, SECURITY: Clarify that bubblewrap does not define a security …"}}],"hasNextPage":false,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEIBrdAgA","startCursor":null,"endCursor":null}},"title":"Activity · containers/bubblewrap"}