commit 5bc8e0be04bcc3e25ded509d82634cbb81372635
Merge: 57552b9dc 1a385651c
Author: Stefano Rivera <stefanor@debian.org>
Date: Tue Apr 28 23:54:08 2026 +0000
Update `test_completion_in_progress` to use POST (MR !3000)
A logical conflict between !2967 and !2903 caused tests to fail on `devel` after merging !2903.
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/3000
commit 1a385651c4c56225c58cb93cc4789ea755ec9f50
Author: Stefano Rivera <stefano@freexian.com>
Date: Tue Apr 28 19:21:27 2026 -0400
Update `test_completion_in_progress` to use POST
Conflict between !2967 and !2903
commit 57552b9dc538a1b560ec840363c59e8b25d76cfb
Merge: 6a1f2708b 3c0539e54
Author: Stefano Rivera <stefanor@debian.org>
Date: Tue Apr 28 22:50:09 2026 +0000
Short lived work request tokens (MR !2884)
This involves some heavy refactoring.
1. Issue a WorkRequestToken when a worker gets its next assignment
2. Require WorkRequestTokens for any action that is performed on behalf of a work request.
3. Limit WorkRequestTokens access to work request inputs, as narrowly as possible.
Fixes: #523
Closes #523
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2884
commit 6a1f2708b0eb2588372bb1042ea5752553cba24e
Merge: 207cf96f0 0455770e4
Author: Stefano Rivera <stefanor@debian.org>
Date: Tue Apr 28 22:49:48 2026 +0000
Use `POST` for `/api/1.0/work-request/get-next-for-worker/`, rather than `GET`. (MR !2903)
We should merge this with !2884 to minimize worker API breakage. We're changing things enough in both of these MRs, that a single big API break seems worth it, rather than spreading the changes out over a release.
Fixes: #1398
Closes #1398
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2903
commit 207cf96f0568bd6905ade2a54162b1a85ee9bd02
Merge: 417c001fd 44605b9fd
Author: Stefano Rivera <stefanor@debian.org>
Date: Tue Apr 28 19:33:45 2026 +0000
Show the number of distinct files stored in ``debusine-admin scope show`` (MR !2999)
Rather than counting duplicates across artifacts.
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2999
commit 44605b9fd55e485d40d40e9b31b9e42f0db91c3d
Author: Stefano Rivera <stefanor@debian.org>
Date: Tue Apr 28 19:33:44 2026 +0000
Show the number of distinct files store in ``debusine-admin scope show``
Rather than counting duplicates across artifacts.
commit 417c001fd2f33fe1716b33c8d173ab3044eb5089
Merge: 6d58c2ad3 bf7834f76
Author: Stefano Rivera <stefanor@debian.org>
Date: Tue Apr 28 18:58:55 2026 +0000
Don't delete an empty file store directory in `vacuum_storage` (MR !2997)
Fixes: #1455
Closes #1455
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2997
commit 6d58c2ad3ac10a2627ebbceb8ceb9ecf8cc5f373
Merge: 66519de89 418185a45
Author: Stefano Rivera <stefanor@debian.org>
Date: Tue Apr 28 18:58:51 2026 +0000
Add missing debusine-server: Depends: libjs-sortable (MR !2998)
Missed in !2916
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2998
commit 66519de897533bc78c301ced67e96a851819a1d0
Merge: ff561f58e db6a7bb0a
Author: Enrico Zini <enrico@debian.org>
Date: Tue Apr 28 18:00:19 2026 +0000
Added blueprint for workflow template permissions (#634) (MR !2939)
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2939
commit db6a7bb0a64315642a378eaf97500ee13e7d0df5
Author: Enrico Zini <enrico@enricozini.org>
Date: Mon Apr 13 17:20:49 2026 +0200
Added blueprint for workflow template permissions
commit 418185a45bf5c6a1b2ccdb344c4a62f326df80d5
Author: Stefano Rivera <stefano@freexian.com>
Date: Tue Apr 28 11:53:26 2026 -0400
Add missing debusine-server: Depends: libjs-sortable
Missed in !2916
commit bf7834f76360e1244b79c07f53ffddf06c688d1a
Author: Stefano Rivera <stefano@freexian.com>
Date: Tue Apr 28 11:49:17 2026 -0400
Don't delete an empty file store root directory in `vacuum_storage`
Fixes: #1455
commit ff561f58e3138e8f494e1731a0b907f0da74c4f5
Merge: 9678ec815 0df91b99b
Author: Colin Watson <cjwatson@debian.org>
Date: Tue Apr 28 15:31:11 2026 +0000
ci: Speed up code-linting job (MR !2994)
We don't need to install all of Debusine's dependencies (which is the
difference between `*prepare-test` and `*before-test`) in order to run
`pre-commit`.
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2994
commit 9678ec815a020adb9ab46c915cab10688f89ed93
Merge: 23e9c0672 e7ec2eb07
Author: Colin Watson <cjwatson@debian.org>
Date: Tue Apr 28 15:30:59 2026 +0000
debusine.tasks: Use @override where relevant (MR !2990)
Part of #1442.
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2990
commit 23e9c0672dacc77517fec4a5160b7c049c246089
Merge: 9e4c3b4ba 0d042aabf
Author: Raphaël Hertzog <hertzog@debian.org>
Date: Tue Apr 28 14:12:18 2026 +0000
Fix debian-pipeline integration test to work with Django 5.2 (MR !2989)
Django 5.2 automatically imports models in "debusine-admin shell" and
prints one line of output by default to inform you of this. Let's decrease
verbosity with "-v 0" to avoid that line and unbreak the JSON parsing
in find_workflow_children().
Part of #1453.
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2989
commit 3c0539e54b1770d83d4e43bf2217fc5c505b7b2d
Author: Stefano Rivera <stefano@freexian.com>
Date: Tue Mar 3 19:45:30 2026 -0400
Require work request scoped worker tokens for Worker's work
commit 3f8a711f121ca2dcb5c7ca35fce306dba993bff6
Author: Stefano Rivera <stefano@freexian.com>
Date: Thu Feb 26 16:43:18 2026 -0400
Implement IsWorkRequestTokenAuthenticated permission
commit 428a197e45abbe8845ade80820ca423712207e8d
Author: Stefano Rivera <stefano@freexian.com>
Date: Tue Feb 24 15:03:42 2026 -0400
Use work request tokens in the worker
commit ffe0b3dcf3a3b7a7e2cebc97b4cc9be97cfc73f1
Author: Stefano Rivera <stefano@freexian.com>
Date: Tue Feb 24 16:35:25 2026 -0400
Delete temporary work request scoped tokens on task completion
commit 59c6df56ad3978e21701c8f63c07259fe202a222
Author: Stefano Rivera <stefano@freexian.com>
Date: Tue Feb 24 13:51:34 2026 -0400
Issue a WorkRequestToken when a worker gets its next assignment
commit 3ebe05329245bac2481389100c64f562ee426e61
Author: Stefano Rivera <stefano@freexian.com>
Date: Tue Feb 24 13:10:31 2026 -0400
Add missing test for Token.objects.create_worker_activation()
commit a7008ea40d1b3782745607271395ce28b11152f0
Author: Stefano Rivera <stefano@freexian.com>
Date: Tue Feb 24 08:41:22 2026 -0400
DB model for a short-lived limited token for workers
commit 9e4c3b4ba84c1b6ea730cbebb07f86178cfa9da9
Merge: ff28df5ad 66353c1f1
Author: Colin Watson <cjwatson@debian.org>
Date: Tue Apr 28 13:53:57 2026 +0000
Disentangle migrations (MR !2991)
!2916 changed a migration that had already landed on devel and been
applied to production instances. Revert those changes and move them to
a new migration instead.
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2991
commit 0df91b99bbcd12205fe11989a13f3c1f5688ab6c
Author: Colin Watson <cjwatson@debian.org>
Date: Tue Apr 28 13:27:50 2026 +0100
ci: Speed up code-linting job
We don't need to install all of Debusine's dependencies (which is the
difference between `*prepare-test` and `*before-test`) in order to run
`pre-commit`.
commit 66353c1f1fa09dc497da8d71a27578095618a9ee
Author: Colin Watson <cjwatson@debian.org>
Date: Tue Apr 28 11:26:27 2026 +0100
Disentangle migrations
!2916 changed a migration that had already landed on devel and been
applied to production instances. Revert those changes and move them to
a new migration instead.
commit e7ec2eb07e6a746e4ce2c424cf029e5aab6357b8
Author: Colin Watson <cjwatson@debian.org>
Date: Tue Apr 28 11:18:15 2026 +0100
debusine.tasks: Use @override where relevant
Part of #1442.
commit 0d042aabf7219f8958201527a750cf6e0f0bbea0
Author: Raphaël Hertzog <raphael@freexian.com>
Date: Tue Apr 28 10:42:34 2026 +0200
Fix debian-pipeline integration test to work with Django 5.2
Django 5.2 automatically imports models in "debusine-admin shell" and
prints one line of output by default to inform you of this. Let's decrease
verbosity with "-v 0" to avoid that line and unbreak the JSON parsing
in find_workflow_children().
Part of #1453.
commit ff28df5ad112d7130fffa03ee46d5c125f2a53d4
Merge: 62b10442e 3ba1fa24e
Author: Colin Watson <cjwatson@debian.org>
Date: Tue Apr 28 09:42:03 2026 +0000
Fine-tune grammar in changelog (MR !2986)
Lintian flags "Allow to" as `spelling-error-in-changelog`, which might
be a little overzealous, but let's pacify it anyway.
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2986
commit 62b10442ee1b12f88c58a9b30053501ac4274d7a
Merge: a44acabce 934de32e5
Author: Stefano Rivera <stefanor@debian.org>
Date: Mon Apr 27 20:25:35 2026 +0000
Record output data when work requests are aborted due to automatic retry limits. (MR !2975)
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2975
commit 934de32e5bb87b27543835cb481b7ea8ab63dbf6
Author: Stefano Rivera <stefano@freexian.com>
Date: Wed Apr 22 12:50:31 2026 -0400
Record output data when work requests are aborted due to automatic retry limits.
commit a44acabcee0703fc6ec2afb0371e085186919111
Merge: 66e0ed584 4677d0879
Author: Colin Watson <cjwatson@debian.org>
Date: Mon Apr 27 14:42:16 2026 +0000
Accept `__in` suffix to lookup matchers (MR !2985)
I realized that the proposed `binaries_from_source_version` multiple
lookup filter was unnecessarily complex. All we need is to be able to
match multiple values of `Architecture` at once using an `__in` suffix
(in fact, we could make do without this by copying lookups, but it's an
obvious convenience).
Part of #1301.
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2985
commit 3ba1fa24e278b22deff5087b58603552d4f55742
Author: Colin Watson <cjwatson@debian.org>
Date: Mon Apr 27 13:38:53 2026 +0100
Fine-tune grammar in changelog
Lintian flags "Allow to" as `spelling-error-in-changelog`, which might
be a little overzealous, but let's pacify it anyway.
commit 66e0ed584aabe5e703335539245dd1ede1efb507
Merge: d0bf42262 04bc57529
Author: Colin Watson <cjwatson@debian.org>
Date: Mon Apr 27 12:09:02 2026 +0000
Remove obsolete Lintian suppression (MR !2983)
This tag was removed from lintian 2.128.0 (see
https://bugs.debian.org/999785), and we use lintian from forky.
This should fix a CI failure on the `debian/trixie-backports` branch (https://salsa.debian.org/freexian-team/debusine/-/jobs/9486614).
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2983
commit 4677d08799f7876e884fdd1bac8cf8858b781661
Author: Colin Watson <cjwatson@debian.org>
Date: Mon Apr 27 12:43:21 2026 +0100
Accept `__in` suffix to lookup matchers
Part of #1301.
commit 38be7bf44922d07fedaf28086020d984ffabf572
Author: Colin Watson <cjwatson@debian.org>
Date: Mon Apr 27 12:33:32 2026 +0100
Simplify blueprint for debci binary package matching
I realized that the proposed `binaries_from_source_version` multiple
lookup filter was unnecessarily complex. All we need is to be able to
match multiple values of `Architecture` at once using an `__in` suffix
(in fact, we could make do without this by copying lookups, but it's an
obvious convenience).
commit d0bf422629da78f664409d2d72b81e064a62eb7e
Merge: c93cada52 abf72a5e9
Author: Carles Pina i Estany <carles@pina.cat>
Date: Mon Apr 27 10:06:27 2026 +0000
CollectionRelation: add basic views for listing and removing (relates #1271) (MR !2916)
related #1271
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2916
commit abf72a5e91731c9d74b295df3151d9f28e0bdca3
Author: Carles Pina i Estany <carles@pina.cat>
Date: Mon Apr 27 10:06:25 2026 +0000
CollectionRelation: add basic views for listing and removing (relates #1271) (MR !2916)
commit 04bc57529e8d293e215d91e5540c467c2eab8362
Author: Colin Watson <cjwatson@debian.org>
Date: Mon Apr 27 10:50:15 2026 +0100
Remove obsolete Lintian suppression
This tag was removed from lintian 2.128.0 (see
https://bugs.debian.org/999785), and we use lintian from forky.
commit c93cada5295c671b7b7ad0074d1ad5e9bbc0ba30
Merge: 9ef088d11 c58d951a0
Author: Stefano Rivera <stefanor@debian.org>
Date: Thu Apr 23 17:38:22 2026 +0000
Microsoft Azure Entra OIDC Support (MR !2980)
1. Simplify configuration for Azure Entra OIDC
2. Generalize restrictions and group additions to all OIDC implementations
Fixes: #1450
Closes #1450
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2980
commit 9ef088d116acfc37c1b76bf6597e1b02ef29e65f
Merge: a88f6ac30 db1a781a6
Author: Colin Watson <cjwatson@debian.org>
Date: Thu Apr 23 17:32:18 2026 +0000
Fix per-architecture task counts in status views (MR !2978)
The aggregation logic only took the size of one of the groups of work
requests (by `scheduler_tags_required`) for each architecture and
status.
Fixes: #1449 (again)
Closes #1449
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2978
commit c58d951a0239d425c0bef93b5825417fa500bd69
Author: Stefano Rivera <stefano@freexian.com>
Date: Wed Apr 22 23:13:15 2026 -0400
Generalize group restrictions and mapping to all OIDC providers
commit 30edc12071ef4be27a91e13fe54a2ff14fb636b7
Author: Stefano Rivera <stefano@freexian.com>
Date: Wed Apr 22 22:56:41 2026 -0400
email_verified is part of the standard OIDC claims, implement it for all OIDC providers
commit 7077f42f639e64443851c56b64c387a0fc3cf94c
Author: Stefano Rivera <stefano@freexian.com>
Date: Wed Apr 22 19:18:02 2026 -0400
Add providers.AzureEntraProvider that generates the correct URLs, itself
commit a88f6ac30083c6adb95041d54f6ae8fc2a07f030
Merge: d427f16fc 8aec7975c
Author: Colin Watson <cjwatson@debian.org>
Date: Thu Apr 23 14:30:05 2026 +0000
Move more dput-ng configuration to /usr/share/dput-ng/ (MR !2979)
This is in line with changes in how dput-ng 1.45 ships its own
configuration files, but it should work even with very old versions of
dput-ng.
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2979
commit 8aec7975cadac290f5576bf77452387193a17693
Author: Colin Watson <cjwatson@debian.org>
Date: Thu Apr 23 13:19:37 2026 +0100
Move more dput-ng configuration to /usr/share/dput-ng/
This is in line with changes in how dput-ng 1.45 ships its own
configuration files, but it should work even with very old versions of
dput-ng.
commit db1a781a66eabcd6767f8d95dcb1c0b448f94534
Author: Colin Watson <cjwatson@debian.org>
Date: Thu Apr 23 11:12:44 2026 +0100
Fix per-architecture task counts in status views
The aggregation logic only took the size of one of the groups of work
requests (by `scheduler_tags_required`) for each architecture and
status.
Fixes: #1449 (again)
commit 1d294951c0c06c89e90f44923b77df89da227314
Author: Stefano Rivera <stefano@freexian.com>
Date: Wed Apr 22 19:17:22 2026 -0400
Restructure test_get to use subTests
commit d427f16fc10fef9a8781a36420c3ba6eb0dd50b3
Merge: 9c1c039fd 70fc0646b
Author: Colin Watson <cjwatson@debian.org>
Date: Wed Apr 22 20:16:48 2026 +0000
debusine.client: Use @override where relevant (MR !2977)
Part of #1442.
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2977
commit 70fc0646b2d7aa7d7c979c26345ea8a67044dd2d
Author: Colin Watson <cjwatson@debian.org>
Date: Wed Apr 22 20:16:40 2026 +0100
debusine.client: Use @override where relevant
Part of #1442.
commit 9c1c039fd0b9a55aef75a3b8ff912826e6ffac05
Merge: 1b9b674ea 79bfd47e7
Author: Colin Watson <cjwatson@debian.org>
Date: Wed Apr 22 17:13:40 2026 +0000
Document available metrics (MR !2951)
Fixes: #1440
Closes #1440
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2951
commit 1b9b674eaea3f96b8228c12f05c6e9e7eac3d37b
Merge: 9c61fc1c0 9cf607d2a
Author: Colin Watson <cjwatson@debian.org>
Date: Wed Apr 22 16:56:48 2026 +0000
debusine.tasks.executors: Use @override where relevant (MR !2974)
Part of #1442.
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2974
commit 9c61fc1c0052adef32c9a980bd70050dae9ee63c
Merge: 18543da93 c49047eb1
Author: Colin Watson <cjwatson@debian.org>
Date: Wed Apr 22 16:41:58 2026 +0000
debusine.server.management: Use @override where relevant (MR !2973)
Part of #1442.
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2973
commit 9cf607d2a2b4940d5b653b3280b0d824dc26ece6
Author: Colin Watson <cjwatson@debian.org>
Date: Wed Apr 22 17:19:01 2026 +0100
debusine.tasks.executors: Use @override where relevant
Part of #1442.
commit c49047eb1e0141a564503154820e9c6b91d8484d
Author: Colin Watson <cjwatson@debian.org>
Date: Wed Apr 22 17:02:53 2026 +0100
debusine.server.management: Use @override where relevant
Part of #1442.
commit 18543da934ce967f3451c0536e7aa317ce8bd06f
Merge: 75c3aa31f d9d1f974b
Author: Colin Watson <cjwatson@debian.org>
Date: Wed Apr 22 15:36:02 2026 +0000
Fix incorrect pending task counts in status views (MR !2972)
The existing tests were clearly incorrect on close inspection, as the
expected values broken down by architecture didn't add up to the
expected totals.
Fixes: #1449
Closes #1449
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2972
commit d9d1f974bc9233d28744d50e086cb5cd607d9356
Author: Colin Watson <cjwatson@debian.org>
Date: Wed Apr 22 15:44:36 2026 +0100
Fix incorrect pending task counts in status views
The existing tests were clearly incorrect on close inspection, as the
expected values broken down by architecture didn't add up to the
expected totals.
Fixes: #1449
commit 75c3aa31f7fdccdaa843d630e4459747816f0712
Merge: b6c2fac0e 41c09c93f
Author: Stefano Rivera <stefanor@debian.org>
Date: Wed Apr 22 14:07:16 2026 +0000
doc-linting: Skip towncrier build if there are no new fragments (MR !2971)
Otherwise it fails on release commits.
> /builds/freexian-team/debusine/docs/reference/release-history.rst:14: WARNING: Duplicate explicit target name: "release-0.14.7". [docutils]
Merge-Request: https://salsa.debian.org/freexian-team/debusine/-/merge_requests/2971
commit 41c09c93fb9955957462aa421cc63d1b97fe06fd
Author: Stefano Rivera <stefano@freexian.com>
Date: Wed Apr 22 09:32:57 2026 -0400
doc-linting: Skip towncrier build if there are no new fragments
Otherwise it fails on release commits.
commit 79bfd47e707849aa0cc633e70a55d17879a8b97a
Author: Colin Watson <cjwatson@debian.org>
Date: Wed Apr 15 16:41:36 2026 +0100
Document available metrics
Fixes: #1440
commit 0455770e43a0b8b0b67c79825b68770e9168c6bd
Author: Stefano Rivera <stefano@freexian.com>
Date: Thu Mar 19 19:29:43 2026 -0400
Use `POST` for `/api/1.0/work-request/get-next-for-worker/`, rather than `GET`.
Fixes: #1398
Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.
Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/d/debusine.png){kind=link}