{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":3156820,"defaultBranch":"develop","name":"securedrop","ownerLogin":"freedomofpress","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2012-01-11T19:57:55.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/5388147?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1715296522.0","currentOid":""},"activityList":{"items":[{"before":"e3797582a7fd2e99e3c8e0ac76fc983ab9013d05","after":"b7cc6a63bbac1210a75291c44fa7b9a61c1cb8dd","ref":"refs/heads/3907-range-requests","pushedAt":"2024-05-10T16:28:42.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zenmonkeykstop","name":"Kevin O'Gorman","path":"/zenmonkeykstop","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2782952?s=80&v=4"},"commit":{"message":"Bump CI docker api version to 1.24","shortMessageHtmlLink":"Bump CI docker api version to 1.24"}},{"before":null,"after":"e3797582a7fd2e99e3c8e0ac76fc983ab9013d05","ref":"refs/heads/3907-range-requests","pushedAt":"2024-05-09T23:15:22.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"micahflee","name":"Micah Lee","path":"/micahflee","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/156128?s=80&v=4"},"commit":{"message":"Add the Accept-Ranges header to download API routes, and fix an off-by-one bug in the test","shortMessageHtmlLink":"Add the Accept-Ranges header to download API routes, and fix an off-b…"}},{"before":"8bde6e70dcf923db2ad3ce0dcd78ac350ecaaca2","after":null,"ref":"refs/heads/6784-hot-reload","pushedAt":"2024-05-09T21:21:28.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"legoktm","name":"Kunal Mehta","path":"/legoktm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/81392?s=80&v=4"}},{"before":"af5a574c331bb04aa192747fd60a9d335b89167d","after":"3a50273be99c78c78ea169854b2264f1edef3dab","ref":"refs/heads/demo","pushedAt":"2024-05-04T09:02:05.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"fpf-k8sbot","name":null,"path":"/fpf-k8sbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/51211910?s=80&v=4"},"commit":{"message":"Merge pull request #7158 from freedomofpress/add-unpassphrased-test-key\n\nadd version of test key with no passphrase for convenience","shortMessageHtmlLink":"Merge pull request #7158 from freedomofpress/add-unpassphrased-test-key"}},{"before":"af5a574c331bb04aa192747fd60a9d335b89167d","after":"3a50273be99c78c78ea169854b2264f1edef3dab","ref":"refs/heads/develop","pushedAt":"2024-05-03T19:36:18.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"zenmonkeykstop","name":"Kevin O'Gorman","path":"/zenmonkeykstop","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2782952?s=80&v=4"},"commit":{"message":"Merge pull request #7158 from freedomofpress/add-unpassphrased-test-key\n\nadd version of test key with no passphrase for convenience","shortMessageHtmlLink":"Merge pull request #7158 from freedomofpress/add-unpassphrased-test-key"}},{"before":null,"after":"d91dc672c491b7d9217069f5d1676cabad4168e6","ref":"refs/heads/add-unpassphrased-test-key","pushedAt":"2024-05-02T23:45:28.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"zenmonkeykstop","name":"Kevin O'Gorman","path":"/zenmonkeykstop","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2782952?s=80&v=4"},"commit":{"message":"add version of test key with no passphrase for convenience","shortMessageHtmlLink":"add version of test key with no passphrase for convenience"}},{"before":"22e56452d6c081b43c257b9234fbfa5b3df74a6c","after":null,"ref":"refs/heads/ignore-safety","pushedAt":"2024-05-02T15:28:06.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"legoktm","name":"Kunal Mehta","path":"/legoktm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/81392?s=80&v=4"}},{"before":"25cf9842c28abc5c475146a56cf50affe6abf3eb","after":null,"ref":"refs/heads/loaddata-valid-dates","pushedAt":"2024-05-02T15:27:57.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"legoktm","name":"Kunal Mehta","path":"/legoktm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/81392?s=80&v=4"}},{"before":"6f7a725097fa02df01d3c8dd467a6faf40bdb3e7","after":"af5a574c331bb04aa192747fd60a9d335b89167d","ref":"refs/heads/demo","pushedAt":"2024-05-02T09:00:58.000Z","pushType":"push","commitsCount":4,"pusher":{"login":"fpf-k8sbot","name":null,"path":"/fpf-k8sbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/51211910?s=80&v=4"},"commit":{"message":"Merge pull request #7156 from freedomofpress/loaddata-valid-dates\n\nloaddata: Fix random_datetime() edge case","shortMessageHtmlLink":"Merge pull request #7156 from freedomofpress/loaddata-valid-dates"}},{"before":"33cb6ebf1dd067d56be5857a65d4c248bbbe658a","after":"af5a574c331bb04aa192747fd60a9d335b89167d","ref":"refs/heads/develop","pushedAt":"2024-05-01T23:44:08.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"cfm","name":"Cory Francis Myers","path":"/cfm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/357435?s=80&v=4"},"commit":{"message":"Merge pull request #7156 from freedomofpress/loaddata-valid-dates\n\nloaddata: Fix random_datetime() edge case","shortMessageHtmlLink":"Merge pull request #7156 from freedomofpress/loaddata-valid-dates"}},{"before":"7acb7fc8796000abfadac0cafb69a1f1bde9186f","after":"25cf9842c28abc5c475146a56cf50affe6abf3eb","ref":"refs/heads/loaddata-valid-dates","pushedAt":"2024-05-01T22:56:30.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"cfm","name":"Cory Francis Myers","path":"/cfm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/357435?s=80&v=4"},"commit":{"message":"loaddata: Fix random_datetime() edge case\n\nInstead of generating month and day separately, generate them at the\nsame time by randomly selecting a day in the year, and then calculating\nthe month and date based on that.\n\nThis should avoid randomly generating invalid dates like February 30th.\n\nFixes #7155.","shortMessageHtmlLink":"loaddata: Fix random_datetime() edge case"}},{"before":"6f7a725097fa02df01d3c8dd467a6faf40bdb3e7","after":"33cb6ebf1dd067d56be5857a65d4c248bbbe658a","ref":"refs/heads/develop","pushedAt":"2024-05-01T22:50:10.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"cfm","name":"Cory Francis Myers","path":"/cfm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/357435?s=80&v=4"},"commit":{"message":"Merge pull request #7157 from freedomofpress/ignore-safety\n\nIgnore some safety alerts","shortMessageHtmlLink":"Merge pull request #7157 from freedomofpress/ignore-safety"}},{"before":"2a2de1540a51b51f7e7e1f444b37d8fdf3b2bd19","after":"22e56452d6c081b43c257b9234fbfa5b3df74a6c","ref":"refs/heads/ignore-safety","pushedAt":"2024-04-30T21:29:36.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"legoktm","name":"Kunal Mehta","path":"/legoktm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/81392?s=80&v=4"},"commit":{"message":"Ignore some safety alerts\n\n* 66700 (CVE-2024-0690) - we only use `no_log` in tor-hidden-services\n where it is not in a loop\n* 66777 (CVE-2023-6237) - not affected, as we build against system\n OpenSSL\n* 66704 (CVE-2024-26130) - we should not be checking PKCS#12 keys/certs\n* 66710 (CVE-2023-29483) - dev only, DoS isn't an issue","shortMessageHtmlLink":"Ignore some safety alerts"}},{"before":null,"after":"2a2de1540a51b51f7e7e1f444b37d8fdf3b2bd19","ref":"refs/heads/ignore-safety","pushedAt":"2024-04-30T21:28:07.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"legoktm","name":"Kunal Mehta","path":"/legoktm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/81392?s=80&v=4"},"commit":{"message":"Ignore some safety alerts\n\n* 66700 (CVE-2024-0690) - we only use `no_log` in tor-hidden-services\n where it is not in a loop\n* 66777 (CVE-2023-6237) - not affected, as we build against system\n OpenSSL\n* 66704 (CVE-2024-26130) - we should not be checking PKCS#12 keys/certs\n* 66710 (CVE-2023-29483) - dev only, DoS isn't an issue","shortMessageHtmlLink":"Ignore some safety alerts"}},{"before":null,"after":"7acb7fc8796000abfadac0cafb69a1f1bde9186f","ref":"refs/heads/loaddata-valid-dates","pushedAt":"2024-04-30T19:01:43.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"legoktm","name":"Kunal Mehta","path":"/legoktm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/81392?s=80&v=4"},"commit":{"message":"loaddata: Fix random_datetime() edge case\n\nInstead of generating month and day separately, generate them at the\nsame time by randomly selecting a day in the year, and then calculating\nthe month and date based on that.\n\nThis should avoid randomly generating invalid dates like February 30th.\n\nFixes #7155.","shortMessageHtmlLink":"loaddata: Fix random_datetime() edge case"}},{"before":"90ea2f9bb361113ae1b9ab8b347c0d572c3f1efa","after":"8db0a799cd5239aec91f18c7a21e8daaf6d27000","ref":"refs/heads/7153-cython-constraint","pushedAt":"2024-04-26T22:31:06.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"zenmonkeykstop","name":"Kevin O'Gorman","path":"/zenmonkeykstop","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2782952?s=80&v=4"},"commit":{"message":"Added ignore for Ansible safety#66700\n\nThe affected version is <2.14.14, making it dev-only. The admin tooling uses 2.15.9.","shortMessageHtmlLink":"Added ignore for Ansible safety#66700"}},{"before":null,"after":"90ea2f9bb361113ae1b9ab8b347c0d572c3f1efa","ref":"refs/heads/7153-cython-constraint","pushedAt":"2024-04-26T22:09:28.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"zenmonkeykstop","name":"Kevin O'Gorman","path":"/zenmonkeykstop","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/2782952?s=80&v=4"},"commit":{"message":"Add cython < 3.0 constraint for dev reqs\n\nmake venv fails on Python 3.11 and greater due to incompatibility between our\npinned PyYAML version and cython 3.0. For now, let's constrain the cython version\nto allow it to succeed. In future we should update development requirements.","shortMessageHtmlLink":"Add cython < 3.0 constraint for dev reqs"}},{"before":"ed472f48780059291ffb9b51bb855ebd6cff38e3","after":null,"ref":"refs/heads/gha-dependabot","pushedAt":"2024-04-16T19:30:44.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"legoktm","name":"Kunal Mehta","path":"/legoktm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/81392?s=80&v=4"}},{"before":"c30e51ab9ea91920255abfd2a6e62867efedb5a2","after":"6f7a725097fa02df01d3c8dd467a6faf40bdb3e7","ref":"refs/heads/demo","pushedAt":"2024-04-06T09:01:52.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"fpf-k8sbot","name":null,"path":"/fpf-k8sbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/51211910?s=80&v=4"},"commit":{"message":"Merge pull request #7150 from freedomofpress/update-apt-test-key\n\nchore: update `apt-test` signing key","shortMessageHtmlLink":"Merge pull request #7150 from freedomofpress/update-apt-test-key"}},{"before":"927420220f3b6f3a3cddca76c13a51124a1340dd","after":null,"ref":"refs/heads/update-apt-test-key","pushedAt":"2024-04-05T15:20:36.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"legoktm","name":"Kunal Mehta","path":"/legoktm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/81392?s=80&v=4"}},{"before":"c30e51ab9ea91920255abfd2a6e62867efedb5a2","after":"6f7a725097fa02df01d3c8dd467a6faf40bdb3e7","ref":"refs/heads/develop","pushedAt":"2024-04-05T15:20:31.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"legoktm","name":"Kunal Mehta","path":"/legoktm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/81392?s=80&v=4"},"commit":{"message":"Merge pull request #7150 from freedomofpress/update-apt-test-key\n\nchore: update `apt-test` signing key","shortMessageHtmlLink":"Merge pull request #7150 from freedomofpress/update-apt-test-key"}},{"before":null,"after":"927420220f3b6f3a3cddca76c13a51124a1340dd","ref":"refs/heads/update-apt-test-key","pushedAt":"2024-04-04T23:15:27.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"cfm","name":"Cory Francis Myers","path":"/cfm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/357435?s=80&v=4"},"commit":{"message":"chore: update apt-test signing key","shortMessageHtmlLink":"chore: update apt-test signing key"}},{"before":"45f515d6d264ec04a2812a772e3a9c4ec73b26b6","after":"7ca19695e579f7c091df4e38717191d5cdd1d775","ref":"refs/heads/kernel-test","pushedAt":"2024-04-04T23:00:31.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"legoktm","name":"Kunal Mehta","path":"/legoktm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/81392?s=80&v=4"},"commit":{"message":"WIP: Configure server for testing kernels\n\nLeverage the existing grsecurity role to provision a server that runs\nthe same kernel setup as a real SecureDrop installation to automate our\ntesting process (see ).\n\nTODO:\n* post on GitHub instead of via email\n* how to provision credentials?","shortMessageHtmlLink":"WIP: Configure server for testing kernels"}},{"before":"6b611951051bb4f5f540cb60ae88f3c4859a13e5","after":"45f515d6d264ec04a2812a772e3a9c4ec73b26b6","ref":"refs/heads/kernel-test","pushedAt":"2024-04-04T22:59:45.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"legoktm","name":"Kunal Mehta","path":"/legoktm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/81392?s=80&v=4"},"commit":{"message":"WIP: Configure server for testing kernels\n\nLeverage the existing grsecurity role to provision a server that runs\nthe same kernel setup as a real SecureDrop installation to automate our\ntesting process (see ).\n\nTODO:\n* post on GitHub instead of via email\n* how to provision credentials?","shortMessageHtmlLink":"WIP: Configure server for testing kernels"}},{"before":"da8ac79a2017001e017b2a742fcb8c81b2f3e7b0","after":"c30e51ab9ea91920255abfd2a6e62867efedb5a2","ref":"refs/heads/demo","pushedAt":"2024-04-04T09:00:42.000Z","pushType":"push","commitsCount":21,"pusher":{"login":"fpf-k8sbot","name":null,"path":"/fpf-k8sbot","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/51211910?s=80&v=4"},"commit":{"message":"Merge pull request #6536 from freedomofpress/6404-link-button-accessibility-improvements\n\nAccessibility improvements for links and buttons","shortMessageHtmlLink":"Merge pull request #6536 from freedomofpress/6404-link-button-accessi…"}},{"before":"ff19fdd41d83957e7fc4e2e481d0320091f275f4","after":"c30e51ab9ea91920255abfd2a6e62867efedb5a2","ref":"refs/heads/develop","pushedAt":"2024-04-04T00:41:49.000Z","pushType":"pr_merge","commitsCount":17,"pusher":{"login":"cfm","name":"Cory Francis Myers","path":"/cfm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/357435?s=80&v=4"},"commit":{"message":"Merge pull request #6536 from freedomofpress/6404-link-button-accessibility-improvements\n\nAccessibility improvements for links and buttons","shortMessageHtmlLink":"Merge pull request #6536 from freedomofpress/6404-link-button-accessi…"}},{"before":"f15ef8977e72a09557eca0e70ee9d5c37a82af0e","after":"c43d9e2a6a48094f74a6434508ed914012bdba8b","ref":"refs/heads/6404-link-button-accessibility-improvements","pushedAt":"2024-04-04T00:11:35.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"cfm","name":"Cory Francis Myers","path":"/cfm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/357435?s=80&v=4"},"commit":{"message":"chore: \"make extract-strings\"","shortMessageHtmlLink":"chore: \"make extract-strings\""}},{"before":"22dd8e5346af04064ac6268ec3c53ff77935fb19","after":"f15ef8977e72a09557eca0e70ee9d5c37a82af0e","ref":"refs/heads/6404-link-button-accessibility-improvements","pushedAt":"2024-04-04T00:06:44.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"cfm","name":"Cory Francis Myers","path":"/cfm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/357435?s=80&v=4"},"commit":{"message":"Update securedrop/journalist_templates/_source_row.html\n\nCo-authored-by: Cory Francis Myers ","shortMessageHtmlLink":"Update securedrop/journalist_templates/_source_row.html"}},{"before":"8ef2626ca09780dd44e76aa742e85793664f7bd3","after":null,"ref":"refs/heads/safety-67136","pushedAt":"2024-04-03T21:29:18.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"legoktm","name":"Kunal Mehta","path":"/legoktm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/81392?s=80&v=4"}},{"before":"da8ac79a2017001e017b2a742fcb8c81b2f3e7b0","after":"ff19fdd41d83957e7fc4e2e481d0320091f275f4","ref":"refs/heads/develop","pushedAt":"2024-04-03T21:29:16.000Z","pushType":"pr_merge","commitsCount":4,"pusher":{"login":"legoktm","name":"Kunal Mehta","path":"/legoktm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/81392?s=80&v=4"},"commit":{"message":"Merge pull request #7149 from freedomofpress/safety-67136\n\nchore: update Pillow to 10.3.0 for Safety 67136 (CVE-2024-28219)","shortMessageHtmlLink":"Merge pull request #7149 from freedomofpress/safety-67136"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAERsEJkgA","startCursor":null,"endCursor":null}},"title":"Activity · freedomofpress/securedrop"}