)]}' { "log": [ { "commit": "392b261debb0f478811ddacb98b118da36b06158", "tree": "ba8afaa8489f677179e9701e4f4c8e05f965715a", "parents": [ "42a2ed4355bc6287da6bb6319f090b499cba4550" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Mon Oct 05 14:38:54 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Oct 05 14:39:38 2026 -0700" }, "message": "Avoid out-of-bounds read when prefetching compound dictionary heads at end of block.\n\nPiperOrigin-RevId: 993910490\n" }, { "commit": "42a2ed4355bc6287da6bb6319f090b499cba4550", "tree": "082aeff68034d0a9f509f9945fe46f9521aeaa67", "parents": [ "558fc647cdaf391228d614ca85f711e02e4e583b" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Wed Sep 30 07:43:41 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 30 07:44:27 2026 -0700" }, "message": "Remove unnecessary ring buffer boundary checks.\n\nPiperOrigin-RevId: 990982480\n" }, { "commit": "558fc647cdaf391228d614ca85f711e02e4e583b", "tree": "c5fec1117ca2c8a03af103f0c5607660bd9af35d", "parents": [ "cf1742afd90a141d6a5a4910ab2229071ab0e505" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Tue Sep 29 22:01:03 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 29 22:01:33 2026 -0700" }, "message": "Use a better best_len in the lazy search.\n\nPiperOrigin-RevId: 990732063\n" }, { "commit": "cf1742afd90a141d6a5a4910ab2229071ab0e505", "tree": "deb42a12087b99117a85bd41daecd1a0c7cd41ef", "parents": [ "e45eb45c0242c9a2d6c7bad1dc108cefe36e73a9" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Tue Sep 29 21:57:14 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 29 21:59:15 2026 -0700" }, "message": "2-byte last distance pre-check.\n\nPiperOrigin-RevId: 990730191\n" }, { "commit": "e45eb45c0242c9a2d6c7bad1dc108cefe36e73a9", "tree": "9b135d529a65dc51b052112ea970385559f19b13", "parents": [ "8e6c3666225c2bbfaab5fa215c5eb9718de0dc07" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Tue Sep 29 21:31:11 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 29 21:31:41 2026 -0700" }, "message": "Prefetch compound dictionary heads in the Brotli encoder.\n\nPiperOrigin-RevId: 990719175\n" }, { "commit": "8e6c3666225c2bbfaab5fa215c5eb9718de0dc07", "tree": "ac37bf7f916f7d576a12787b53014153316811dc", "parents": [ "d5d3f45973da91c386dd7e1086b13facecfb4087" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Tue Sep 29 11:02:33 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 29 11:03:05 2026 -0700" }, "message": "Reduce redundant calculations between prefetching and dictionary lookup.\n\nPiperOrigin-RevId: 990412667\n" }, { "commit": "d5d3f45973da91c386dd7e1086b13facecfb4087", "tree": "d5a28c402f01ab7a08d1a9bfd2103902f887a1df", "parents": [ "11017d7812b0502005603cf0f3cce0054e885d72" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Mon Sep 28 10:53:51 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 28 10:54:28 2026 -0700" }, "message": "Update generated man page golden for Pandoc 2.19.2.\n\nPiperOrigin-RevId: 989721003\n" }, { "commit": "11017d7812b0502005603cf0f3cce0054e885d72", "tree": "0c19310bf8720192b70c90e4a6739138152b0c9a", "parents": [ "1b34d3beec74951b8cbb3ae1714c012869b2c7f3" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Wed Sep 23 14:28:58 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 23 14:29:37 2026 -0700" }, "message": "Prefetch the dictionary contents.\n\nPiperOrigin-RevId: 987007178\n" }, { "commit": "1b34d3beec74951b8cbb3ae1714c012869b2c7f3", "tree": "8eafa5be425094179b3eeafebbda804e69668721", "parents": [ "a3abcbee0d945e51dddeec81e647ffe0cde182c2" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Wed Sep 23 14:27:18 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 23 14:28:13 2026 -0700" }, "message": "Outline StoreRange in the new experimental hasher\n\nPiperOrigin-RevId: 987006050\n" }, { "commit": "a3abcbee0d945e51dddeec81e647ffe0cde182c2", "tree": "5be27b76741a2f166dc50b773b4e15488eae93d2", "parents": [ "85c2aaf13a19c9594f577a854bb4abb5fd5441a7" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Wed Sep 16 11:52:00 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 16 11:52:45 2026 -0700" }, "message": "Eagerly initialize the ringbuffer tail.\n\nPiperOrigin-RevId: 982638317\n" }, { "commit": "85c2aaf13a19c9594f577a854bb4abb5fd5441a7", "tree": "9a9622e79acccc67e0eaf02348c1e81dbf5d29d8", "parents": [ "447439d7c43fedbe651ac6047465cc83fb550530" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Tue Sep 15 15:45:23 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 15:46:01 2026 -0700" }, "message": "Include a copy of hash_longest_match_simd_inc.h in the experimental new hasher.\n\nPiperOrigin-RevId: 982085055\n" }, { "commit": "447439d7c43fedbe651ac6047465cc83fb550530", "tree": "218129386be34a8ee1ce893b14406179676f047a", "parents": [ "30cd40b76bd2b551cb13f102d80588743a50b6ba" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Tue Sep 15 15:43:05 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 15:44:05 2026 -0700" }, "message": "Speed up dictionary compression by hoisting constant calculation.\n\nPiperOrigin-RevId: 982083807\n" }, { "commit": "30cd40b76bd2b551cb13f102d80588743a50b6ba", "tree": "6867142c1fb6079dcdaad5c328092938df3871e4", "parents": [ "f297c64ceb0e5df2b0a6897f8d94d19ac0940cbf" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Tue Sep 15 12:42:11 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 12:42:47 2026 -0700" }, "message": "Use BROTLI_MAKE_UINT64_T for kBase64Trigger64 constant.\n\nPiperOrigin-RevId: 981981051\n" }, { "commit": "f297c64ceb0e5df2b0a6897f8d94d19ac0940cbf", "tree": "f1d3b06304b64616db580a793261a56e12752f8d", "parents": [ "09e1ac6c7eea9d3b53f85bcdde6347358dbe1281" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Tue Sep 15 09:05:34 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 09:06:38 2026 -0700" }, "message": "Add BROTLI_PARAM_MIN_BASE64_REGION_LEN to gate Base64 literal mode by region size.\n\nPiperOrigin-RevId: 981859989\n" }, { "commit": "09e1ac6c7eea9d3b53f85bcdde6347358dbe1281", "tree": "5a06e48e0a9fd9d52a9b3804f7034eba8e65088d", "parents": [ "fc42fd9adc106ddc984385b9dae41e120f030dbd" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Thu Sep 10 12:23:57 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 10 12:24:32 2026 -0700" }, "message": "Add an experimental new hasher.\n\nPiperOrigin-RevId: 979328359\n" }, { "commit": "fc42fd9adc106ddc984385b9dae41e120f030dbd", "tree": "68617b70333ccb51d5bea16296353eee790f6cc7", "parents": [ "4508218e7fef90fa4273286f7a415065946f2c43", "89f576cf8764588db71cf27c2c2a27f3b58ef28c" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 10 06:06:04 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 10 06:06:04 2026 -0700" }, "message": "Merge pull request #1516 from carrerasdarren-cell:agent/fix-base64-position-wrap\n\nPiperOrigin-RevId: 979139871\n" }, { "commit": "89f576cf8764588db71cf27c2c2a27f3b58ef28c", "tree": "68617b70333ccb51d5bea16296353eee790f6cc7", "parents": [ "aa62facb4ac61f07508af8e76de01189cc71f8a9", "4508218e7fef90fa4273286f7a415065946f2c43" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Thu Sep 10 13:46:59 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Sep 10 13:46:59 2026 +0200" }, "message": "Merge branch \u0027master\u0027 into agent/fix-base64-position-wrap" }, { "commit": "4508218e7fef90fa4273286f7a415065946f2c43", "tree": "38858ba51b81e35658c50c06cd9825b147ec49dd", "parents": [ "61fe96194b7cf8ecb651892f8f644bc01761c5d3", "5af3654d5e65e1e554e571686034ee1d72b50342" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 01 01:17:18 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 01 01:17:18 2026 -0700" }, "message": "Merge pull request #1528 from tvost2:fix/bsd-mtime-nsec\n\nPiperOrigin-RevId: 974340007\n" }, { "commit": "5af3654d5e65e1e554e571686034ee1d72b50342", "tree": "38858ba51b81e35658c50c06cd9825b147ec49dd", "parents": [ "2a4ff20d3c1bb8857463e626ab37d89dfcd2b1fa", "61fe96194b7cf8ecb651892f8f644bc01761c5d3" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Tue Sep 01 09:42:49 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Sep 01 09:42:49 2026 +0200" }, "message": "Merge branch \u0027master\u0027 into fix/bsd-mtime-nsec" }, { "commit": "2a4ff20d3c1bb8857463e626ab37d89dfcd2b1fa", "tree": "d4df9d7aa92d01ee5790fe2d97d9075928607cff", "parents": [ "2ff28fb62deeb8c49720acf2c16ecc8f6f7408f1" ], "author": { "name": "tvost2", "email": "tvostrodrigues8@gmail.com", "time": "Mon Aug 31 00:22:36 2026 -0300" }, "committer": { "name": "tvost2", "email": "tvostrodrigues8@gmail.com", "time": "Mon Aug 31 09:48:17 2026 -0300" }, "message": "cli: preserve sub-second mtime on the BSDs (fixes #1515)\n\nHAVE_UTIMENSAT was only set when _POSIX_C_SOURCE \u003e\u003d 200809L or\n_ATFILE_SOURCE was defined. FreeBSD, OpenBSD, NetBSD and DragonFly BSD\nprovide utimensat()/futimens() and nanosecond-resolution stat timestamps\nby default without defining either macro, so the CLI fell back to utime()\nand truncated the copied mtime to whole seconds (visible as .br files with\na .000000000 nanosecond field next to the source).\n\nDetect those platforms explicitly. The existing non-Apple ATIME_NSEC /\nMTIME_NSEC macros already use the st_atim / st_mtim spelling that the BSDs\nexpose, so no further change is needed.\n" }, { "commit": "61fe96194b7cf8ecb651892f8f644bc01761c5d3", "tree": "280c085e1aa8b3b68562398bdab5ce19aa28c645", "parents": [ "2ff28fb62deeb8c49720acf2c16ecc8f6f7408f1", "4e7eec66416fbcf16b54291b8db0b1c17a662cba" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 31 04:43:25 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 31 04:43:25 2026 -0700" }, "message": "Merge pull request #1526 from eustas:fix_lint\n\nPiperOrigin-RevId: 973810649\n" }, { "commit": "4e7eec66416fbcf16b54291b8db0b1c17a662cba", "tree": "280c085e1aa8b3b68562398bdab5ce19aa28c645", "parents": [ "05b38fc3d06e65cc2eef7bfa14d4bdf486107eb9", "2ff28fb62deeb8c49720acf2c16ecc8f6f7408f1" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Mon Aug 31 12:40:35 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Aug 31 12:40:35 2026 +0200" }, "message": "Merge branch \u0027master\u0027 into fix_lint" }, { "commit": "2ff28fb62deeb8c49720acf2c16ecc8f6f7408f1", "tree": "9abcba1e5c2a243eec8965c4fa36d72d098173cd", "parents": [ "8e10eeb3378f6c459dbaf033ca6727e9816afccb", "ed071c4786dbbc98ca74ef979b30db75a09e13ce" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 02:18:27 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 02:18:27 2026 -0700" }, "message": "Merge pull request #1527 from rootkiller6788:fix-parseparams-empty-args-oob\n\nPiperOrigin-RevId: 971820982\n" }, { "commit": "05b38fc3d06e65cc2eef7bfa14d4bdf486107eb9", "tree": "781368d61cb15de2ba5932fefec75a32c2d02db9", "parents": [ "8e10eeb3378f6c459dbaf033ca6727e9816afccb" ], "author": { "name": "Evgenii Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Tue Aug 25 11:12:43 2026 +0200" }, "committer": { "name": "Evgenii Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Tue Aug 25 11:12:43 2026 +0200" }, "message": "Fix new ruff findings\n" }, { "commit": "ed071c4786dbbc98ca74ef979b30db75a09e13ce", "tree": "9abcba1e5c2a243eec8965c4fa36d72d098173cd", "parents": [ "8e10eeb3378f6c459dbaf033ca6727e9816afccb" ], "author": { "name": "rootkiller6788", "email": "c8688rickowens@outlook.com", "time": "Fri Aug 21 17:31:03 2026 +0000" }, "committer": { "name": "rootkiller6788", "email": "c8688rickowens@outlook.com", "time": "Fri Aug 21 17:31:03 2026 +0000" }, "message": "Fix out-of-bounds write in ParseParams for empty-string arguments\n\nEmpty-string CLI arguments were recorded in params-\u003enot_input_indices\nbefore the \"too many options\" bounds check ran, so passing more than\nMAX_OPTIONS empty-string arguments wrote past the end of the\nfixed-size array and corrupted the stack (reproducible crash).\nMove the bounds check to the top of the argument loop so every write\nsite is guarded.\n" }, { "commit": "aa62facb4ac61f07508af8e76de01189cc71f8a9", "tree": "8351bdfd710fb91aee84201f901910752b889d25", "parents": [ "8e10eeb3378f6c459dbaf033ca6727e9816afccb" ], "author": { "name": "carrerasdarren-cell", "email": "283775510+carrerasdarren-cell@users.noreply.github.com", "time": "Fri Aug 07 04:28:57 2026 -0400" }, "committer": { "name": "carrerasdarren-cell", "email": "283775510+carrerasdarren-cell@users.noreply.github.com", "time": "Fri Aug 07 04:28:57 2026 -0400" }, "message": "Fix Base64 position wrap handling\n" }, { "commit": "8e10eeb3378f6c459dbaf033ca6727e9816afccb", "tree": "3d05a9d05c0bd9641b4849aec7b8a55eecd718e0", "parents": [ "0d1f6297d6a4f6e2acd5e50ae9a5d22c3f55ba6d" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Tue Aug 04 12:40:07 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 04 12:40:26 2026 -0700" }, "message": "Add params to brotli to manually enable or disable the SIMD hashers.\n\nPiperOrigin-RevId: 959173169\n" }, { "commit": "0d1f6297d6a4f6e2acd5e50ae9a5d22c3f55ba6d", "tree": "8ec747efb0a4e86751bb7a466f986a8519fa3e50", "parents": [ "037b70e2ad03b20480e6407ed5851e0f114b67a7" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Wed Jul 29 08:33:32 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 29 08:34:01 2026 -0700" }, "message": "Fix edge cases and stability issues in Brotli Base64 entropy coding optimization.\n\nPiperOrigin-RevId: 955899701\n" }, { "commit": "037b70e2ad03b20480e6407ed5851e0f114b67a7", "tree": "e30b61c434f90fb53282b0079783515bedb7be7e", "parents": [ "4afbc333d08293f7842954b8c51625d9a2c3b1b6" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Tue Jul 14 19:00:43 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 14 19:01:09 2026 -0700" }, "message": "Add an experimental feature to automatically detect Base64 encoded content in the input stream and optimize compression by skipping dictionary and history lookups for these regions. This is controlled by a new parameter BROTLI_PARAM_BASE64_MODE.\n\nPiperOrigin-RevId: 948030912\n" }, { "commit": "4afbc333d08293f7842954b8c51625d9a2c3b1b6", "tree": "68081fbf019e393a4c9503e78a4815fdafb4c4f9", "parents": [ "4e6d8fbfa3d11b491105c12b579727522aa7e836", "51e7588f2115ff3db6843d088df2de15d3a65f8d" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 14 14:30:54 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 14 14:30:54 2026 -0700" }, "message": "Merge pull request #1506 from google:dependabot/github_actions/everything-015e380c35\n\nPiperOrigin-RevId: 947908514\n" }, { "commit": "51e7588f2115ff3db6843d088df2de15d3a65f8d", "tree": "68081fbf019e393a4c9503e78a4815fdafb4c4f9", "parents": [ "4e6d8fbfa3d11b491105c12b579727522aa7e836" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jul 14 08:14:16 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jul 14 08:14:16 2026 +0000" }, "message": "Bump the everything group across 1 directory with 7 updates\n\nBumps the everything group with 7 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.19.4` | `2.20.0` |\n| [actions/setup-node](https://github.com/actions/setup-node) | `6.4.0` | `7.0.0` |\n| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.36.2` | `4.37.0` |\n| [github/codeql-action/autobuild](https://github.com/github/codeql-action) | `4.36.2` | `4.37.0` |\n| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.36.2` | `4.37.0` |\n| [bazel-contrib/publish-to-bcr/.github/workflows/publish.yaml](https://github.com/bazel-contrib/publish-to-bcr) | `005a51c75c5027e54477d290a21aa57e0a1a65f5` | `ad6879fd015a01c3e3b1b318fe3c061f928ac2fb` |\n| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.36.2` | `4.37.0` |\n\n\n\nUpdates `step-security/harden-runner` from 2.19.4 to 2.20.0\n- [Release notes](https://github.com/step-security/harden-runner/releases)\n- [Commits](https://github.com/step-security/harden-runner/compare/9af89fc71515a100421586dfdb3dc9c984fbf411...bf7454d06d71f1098171f2acdf0cd4708d7b5920)\n\nUpdates `actions/setup-node` from 6.4.0 to 7.0.0\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020)\n\nUpdates `github/codeql-action/init` from 4.36.2 to 4.37.0\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...99df26d4f13ea111d4ec1a7dddef6063f76b97e9)\n\nUpdates `github/codeql-action/autobuild` from 4.36.2 to 4.37.0\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...99df26d4f13ea111d4ec1a7dddef6063f76b97e9)\n\nUpdates `github/codeql-action/analyze` from 4.36.2 to 4.37.0\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...99df26d4f13ea111d4ec1a7dddef6063f76b97e9)\n\nUpdates `bazel-contrib/publish-to-bcr/.github/workflows/publish.yaml` from 005a51c75c5027e54477d290a21aa57e0a1a65f5 to ad6879fd015a01c3e3b1b318fe3c061f928ac2fb\n- [Release notes](https://github.com/bazel-contrib/publish-to-bcr/releases)\n- [Commits](https://github.com/bazel-contrib/publish-to-bcr/compare/005a51c75c5027e54477d290a21aa57e0a1a65f5...ad6879fd015a01c3e3b1b318fe3c061f928ac2fb)\n\nUpdates `github/codeql-action/upload-sarif` from 4.36.2 to 4.37.0\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...99df26d4f13ea111d4ec1a7dddef6063f76b97e9)\n\n---\nupdated-dependencies:\n- dependency-name: step-security/harden-runner\n dependency-version: 2.20.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: everything\n- dependency-name: actions/setup-node\n dependency-version: 7.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n dependency-group: everything\n- dependency-name: github/codeql-action/init\n dependency-version: 4.37.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: everything\n- dependency-name: github/codeql-action/autobuild\n dependency-version: 4.37.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: everything\n- dependency-name: github/codeql-action/analyze\n dependency-version: 4.37.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: everything\n- dependency-name: bazel-contrib/publish-to-bcr/.github/workflows/publish.yaml\n dependency-version: ad6879fd015a01c3e3b1b318fe3c061f928ac2fb\n dependency-type: direct:production\n dependency-group: everything\n- dependency-name: github/codeql-action/upload-sarif\n dependency-version: 4.37.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: everything\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "4e6d8fbfa3d11b491105c12b579727522aa7e836", "tree": "fe30963690cd96a1ff9b7d68ee2af22e70411f52", "parents": [ "362f43adef874f308ef058635c3e36b8286c67e5" ], "author": { "name": "Evgenii Kliuchnikov", "email": "eustas@google.com", "time": "Wed Jul 08 01:13:34 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 08 01:14:10 2026 -0700" }, "message": "Retain source data for prepared dictionary.\n\nUnlike pure-java prepared dictionary, in native prepared dictionaries source data is not copied, but referenced.\n\nLikely because of copy-paste, `raw_data` field was not populated.\n\nPiperOrigin-RevId: 944339020\n" }, { "commit": "362f43adef874f308ef058635c3e36b8286c67e5", "tree": "4bced05569a79977eb78abc71ca2fd4e83858ff1", "parents": [ "27cc9fe9a4aa8901be3b3ba29f2f09eaddb08f97", "73ffe712a40e6aef1af35331df6fa80886eb14c1" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 06 01:24:25 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 06 01:24:25 2026 -0700" }, "message": "Merge pull request #1502 from eustas:zizmor\n\nPiperOrigin-RevId: 943118404\n" }, { "commit": "73ffe712a40e6aef1af35331df6fa80886eb14c1", "tree": "4bced05569a79977eb78abc71ca2fd4e83858ff1", "parents": [ "27cc9fe9a4aa8901be3b3ba29f2f09eaddb08f97" ], "author": { "name": "Evgenii Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Fri Jul 03 15:14:08 2026 +0000" }, "committer": { "name": "Evgenii Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Fri Jul 03 15:14:08 2026 +0000" }, "message": "Add zizmor audit\n\nAnd fix findings.\nDrive-by: fix windows build\n" }, { "commit": "27cc9fe9a4aa8901be3b3ba29f2f09eaddb08f97", "tree": "c2106e9433c7b894f0a18d212ab64cd7ef24ae25", "parents": [ "83fe766bc81f7911a78716b8d3b3d01367009995", "2e0b1dc6e1f0c14f4efd0d48cc080c9fa92925de" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jul 03 06:51:37 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jul 03 06:51:37 2026 -0700" }, "message": "Merge pull request #1500 from google:dependabot/github_actions/everything-0a43ab5142\n\nPiperOrigin-RevId: 942121953\n" }, { "commit": "2e0b1dc6e1f0c14f4efd0d48cc080c9fa92925de", "tree": "c2106e9433c7b894f0a18d212ab64cd7ef24ae25", "parents": [ "83fe766bc81f7911a78716b8d3b3d01367009995" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Jun 30 08:14:10 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 30 08:14:10 2026 +0000" }, "message": "Bump the everything group across 1 directory with 7 updates\n\nBumps the everything group with 7 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.0` |\n| [actions/setup-python](https://github.com/actions/setup-python) | `6.2.0` | `6.3.0` |\n| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.36.0` | `4.36.2` |\n| [github/codeql-action/autobuild](https://github.com/github/codeql-action) | `4.36.0` | `4.36.2` |\n| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.36.0` | `4.36.2` |\n| [actions/cache](https://github.com/actions/cache) | `5.0.5` | `6.1.0` |\n| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.36.0` | `4.36.2` |\n\n\n\nUpdates `actions/checkout` from 6.0.2 to 7.0.0\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0)\n\nUpdates `actions/setup-python` from 6.2.0 to 6.3.0\n- [Release notes](https://github.com/actions/setup-python/releases)\n- [Commits](https://github.com/actions/setup-python/compare/a309ff8b426b58ec0e2a45f0f869d46889d02405...ece7cb06caefa5fff74198d8649806c4678c61a1)\n\nUpdates `github/codeql-action/init` from 4.36.0 to 4.36.2\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)\n\nUpdates `github/codeql-action/autobuild` from 4.36.0 to 4.36.2\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)\n\nUpdates `github/codeql-action/analyze` from 4.36.0 to 4.36.2\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)\n\nUpdates `actions/cache` from 5.0.5 to 6.1.0\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9)\n\nUpdates `github/codeql-action/upload-sarif` from 4.36.0 to 4.36.2\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...8aad20d150bbac5944a9f9d289da16a4b0d87c1e)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n dependency-version: 7.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n dependency-group: everything\n- dependency-name: actions/setup-python\n dependency-version: 6.3.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n dependency-group: everything\n- dependency-name: github/codeql-action/init\n dependency-version: 4.36.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: everything\n- dependency-name: github/codeql-action/autobuild\n dependency-version: 4.36.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: everything\n- dependency-name: github/codeql-action/analyze\n dependency-version: 4.36.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: everything\n- dependency-name: actions/cache\n dependency-version: 6.1.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n dependency-group: everything\n- dependency-name: github/codeql-action/upload-sarif\n dependency-version: 4.36.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: everything\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "83fe766bc81f7911a78716b8d3b3d01367009995", "tree": "4510702ef306f072e36f3258394a07f5fd79c2fd", "parents": [ "f0328d1544dcd1a1f93996aeeeccf222657af25b", "183d03c36cb2c7f0ede8a19b1286058cdc3edfa3" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jun 16 01:42:51 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jun 16 01:42:51 2026 -0700" }, "message": "Merge pull request #1494 from aleister1102:fix/decoder-jni-push-bounds-check\n\nPiperOrigin-RevId: 932949831\n" }, { "commit": "183d03c36cb2c7f0ede8a19b1286058cdc3edfa3", "tree": "4510702ef306f072e36f3258394a07f5fd79c2fd", "parents": [ "2dc2a5feeaf3fc2f3e46ce8e20be1d296dd6d485" ], "author": { "name": "aleister1102", "email": "marucube35@gmail.com", "time": "Thu Jun 11 23:42:04 2026 +0700" }, "committer": { "name": "aleister1102", "email": "marucube35@gmail.com", "time": "Thu Jun 11 23:42:04 2026 +0700" }, "message": "fix(java): validate decoder push length in Wrapper only\n\nPer review feedback, keep the input length upper-bound check in\nDecoderJNI.Wrapper.push() and remove the redundant native guard.\n" }, { "commit": "2dc2a5feeaf3fc2f3e46ce8e20be1d296dd6d485", "tree": "a2638135686c7bd3223765a4d955a0d2a96766b8", "parents": [ "f0328d1544dcd1a1f93996aeeeccf222657af25b" ], "author": { "name": "aleister1102", "email": "marucube35@gmail.com", "time": "Sun Jun 07 00:08:16 2026 +0700" }, "committer": { "name": "aleister1102", "email": "marucube35@gmail.com", "time": "Sun Jun 07 00:20:09 2026 +0700" }, "message": "fix(java): reject decoder push length exceeding input buffer capacity\n\nDecoderJNI.Wrapper.push(int length) validated only length \u003c 0. nativePush() stored input_length without an upper bound, and DecoderHandle did not retain the input buffer\u0027s allocation size, so new DecoderJNI.Wrapper(1).push(32) made BrotliDecoderDecompressStream read past the one-byte input allocation (heap out-of-bounds read).\n\nAdd an upper-bound check in Wrapper.push(), and as defense in depth store the allocation size in DecoderHandle and reject oversized input_length in nativePush(). Add DecoderJNITest covering rejection and a valid round trip.\n" }, { "commit": "f0328d1544dcd1a1f93996aeeeccf222657af25b", "tree": "6afb2a0494fc9a0c6c55d17e1ae03447d58761db", "parents": [ "b9a3377befbcc00c44569e541fd0aa542cea5cd8", "dc14914ed7db9dcff10b35f3aef384ef28223435" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jun 02 00:55:11 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jun 02 00:55:12 2026 -0700" }, "message": "Merge pull request #1395 from mmorel-35:bcr\n\nPiperOrigin-RevId: 925175633\n" }, { "commit": "dc14914ed7db9dcff10b35f3aef384ef28223435", "tree": "6afb2a0494fc9a0c6c55d17e1ae03447d58761db", "parents": [ "ec8d979d399588ea6fa70da147d258bbf0bd56cf", "b9a3377befbcc00c44569e541fd0aa542cea5cd8" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Tue Jun 02 08:48:51 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Jun 02 08:48:51 2026 +0200" }, "message": "Merge branch \u0027master\u0027 into bcr" }, { "commit": "b9a3377befbcc00c44569e541fd0aa542cea5cd8", "tree": "9e491a7a7f53a920c6d0614a538d0addda9152fb", "parents": [ "bfd14e07678fe0251c2a8582051c8312a80e2f17", "fe97583df2b6331ead08c31d72e9b473de6b5472" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jun 01 06:32:44 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jun 01 06:32:44 2026 -0700" }, "message": "Merge pull request #1406 from mannewalis:fix/emscripten-detection\n\nPiperOrigin-RevId: 924674243\n" }, { "commit": "ec8d979d399588ea6fa70da147d258bbf0bd56cf", "tree": "bea27b30517eea85ef2b73ed3cbb5e22b1308ced", "parents": [ "ea0e8289c98e68c63f1447021cebbf3014cc1020", "bfd14e07678fe0251c2a8582051c8312a80e2f17" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Mon Jun 01 15:27:40 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 15:27:40 2026 +0200" }, "message": "Merge branch \u0027master\u0027 into bcr" }, { "commit": "bfd14e07678fe0251c2a8582051c8312a80e2f17", "tree": "24898a046bc2c7916d2e195bac19df3cc49d2309", "parents": [ "3907ece8dbc82a96bbb22428fa0de2183fa41b18", "b915d37a47e3e8a81aba4338060d4e9459c9ca71" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jun 01 06:10:33 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jun 01 06:10:33 2026 -0700" }, "message": "Merge pull request #1487 from google:dependabot/github_actions/step-security/harden-runner-2.19.4\n\nPiperOrigin-RevId: 924665869\n" }, { "commit": "b915d37a47e3e8a81aba4338060d4e9459c9ca71", "tree": "24898a046bc2c7916d2e195bac19df3cc49d2309", "parents": [ "c2d0fd3ac9bfd9eb2833d5ad99305656320d66af", "3907ece8dbc82a96bbb22428fa0de2183fa41b18" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Mon Jun 01 15:05:27 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 15:05:27 2026 +0200" }, "message": "Merge branch \u0027master\u0027 into dependabot/github_actions/step-security/harden-runner-2.19.4" }, { "commit": "fe97583df2b6331ead08c31d72e9b473de6b5472", "tree": "2b2bda6511fba743db2aef68a6200b352f41aae1", "parents": [ "7607185e2624bbe4fed65c5476e3166a57cdea14", "3907ece8dbc82a96bbb22428fa0de2183fa41b18" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Mon Jun 01 14:57:49 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 14:57:49 2026 +0200" }, "message": "Merge branch \u0027master\u0027 into fix/emscripten-detection" }, { "commit": "3907ece8dbc82a96bbb22428fa0de2183fa41b18", "tree": "a34bb50a8eff6c681e10381fffd1d6b9b2586a9a", "parents": [ "7941b467b2c84dd37f6f27cd930f3b51b3305b54", "65d95f8aa149f26b628d52654a844b9ee1ba997f" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jun 01 05:32:12 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jun 01 05:32:12 2026 -0700" }, "message": "Merge pull request #1490 from google:eustas-patch-1\n\nPiperOrigin-RevId: 924650836\n" }, { "commit": "65d95f8aa149f26b628d52654a844b9ee1ba997f", "tree": "a34bb50a8eff6c681e10381fffd1d6b9b2586a9a", "parents": [ "922fc3c504293aff95bcc7191e048b2f30e89ccf", "7941b467b2c84dd37f6f27cd930f3b51b3305b54" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Mon Jun 01 14:28:00 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 14:28:00 2026 +0200" }, "message": "Merge branch \u0027master\u0027 into eustas-patch-1" }, { "commit": "7941b467b2c84dd37f6f27cd930f3b51b3305b54", "tree": "a474d2cff6371debd4ca9a50f9d86d7f8644f8dc", "parents": [ "174ac8058b6970c07b073f5f85c6bf11cc656fa0" ], "author": { "name": "Evgenii Kliuchnikov", "email": "eustas@google.com", "time": "Mon Jun 01 05:24:58 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jun 01 05:25:26 2026 -0700" }, "message": "Fix Bazel build\n\nPiperOrigin-RevId: 924648497\n" }, { "commit": "c2d0fd3ac9bfd9eb2833d5ad99305656320d66af", "tree": "4d6dabe10eebe903136f030b18336078aa0ecf8d", "parents": [ "174ac8058b6970c07b073f5f85c6bf11cc656fa0" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 01 12:04:30 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 12:04:30 2026 +0000" }, "message": "Bump step-security/harden-runner from 2.17.0 to 2.19.4\n\nBumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.17.0 to 2.19.4.\n- [Release notes](https://github.com/step-security/harden-runner/releases)\n- [Commits](https://github.com/step-security/harden-runner/compare/f808768d1510423e83855289c910610ca9b43176...9af89fc71515a100421586dfdb3dc9c984fbf411)\n\n---\nupdated-dependencies:\n- dependency-name: step-security/harden-runner\n dependency-version: 2.19.4\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "174ac8058b6970c07b073f5f85c6bf11cc656fa0", "tree": "278e918cb16990f2315dd308dd673ba51c308d35", "parents": [ "aa150a1847b382c6c70a499d4831986d792f63b0", "e35f83fc36ae8288e3c65199dfa9e912d0276a59" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jun 01 05:02:19 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jun 01 05:02:19 2026 -0700" }, "message": "Merge pull request #1486 from google:dependabot/github_actions/github/codeql-action-4.36.0\n\nPiperOrigin-RevId: 924639598\n" }, { "commit": "922fc3c504293aff95bcc7191e048b2f30e89ccf", "tree": "5bfb2999c9f6b1a46c0b76b529ea118525fa4419", "parents": [ "aa150a1847b382c6c70a499d4831986d792f63b0" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Mon Jun 01 13:26:30 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 13:26:30 2026 +0200" }, "message": "Configure Dependabot to group updates\n\nAdd grouping for Dependabot updates to combine into a single PR." }, { "commit": "e35f83fc36ae8288e3c65199dfa9e912d0276a59", "tree": "278e918cb16990f2315dd308dd673ba51c308d35", "parents": [ "aa150a1847b382c6c70a499d4831986d792f63b0" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Jun 01 10:24:40 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 10:24:40 2026 +0000" }, "message": "Bump github/codeql-action from 4.35.1 to 4.36.0\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.1 to 4.36.0.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/c10b8064de6f491fea524254123dbe5e09572f13...7211b7c8077ea37d8641b6271f6a365a22a5fbfa)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n dependency-version: 4.36.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "aa150a1847b382c6c70a499d4831986d792f63b0", "tree": "e96ae81241ce7768b17f266545205a0ccaaec5c5", "parents": [ "6312ee24cebbe329cee30fe12087469e3014442b", "31d450013de2d7997746544b34725cb582992246" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jun 01 03:22:21 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jun 01 03:22:21 2026 -0700" }, "message": "Merge pull request #1466 from google:dependabot/github_actions/actions/setup-node-6.4.0\n\nPiperOrigin-RevId: 924598585\n" }, { "commit": "31d450013de2d7997746544b34725cb582992246", "tree": "e96ae81241ce7768b17f266545205a0ccaaec5c5", "parents": [ "81d3468a1ae2b7ea16be31c457b52a92e9e47795", "6312ee24cebbe329cee30fe12087469e3014442b" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Mon Jun 01 12:17:58 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Jun 01 12:17:58 2026 +0200" }, "message": "Merge branch \u0027master\u0027 into dependabot/github_actions/actions/setup-node-6.4.0" }, { "commit": "6312ee24cebbe329cee30fe12087469e3014442b", "tree": "800cccbe40842946d561c38f1914be9ec7d8bdc1", "parents": [ "73ba6a2322b113b08e0a175abef8347e8fffae86" ], "author": { "name": "Evgenii Kliuchnikov", "email": "eustas@google.com", "time": "Fri May 15 01:45:55 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri May 15 01:46:21 2026 -0700" }, "message": "revert API change\n\nPiperOrigin-RevId: 915873630\n" }, { "commit": "73ba6a2322b113b08e0a175abef8347e8fffae86", "tree": "17b7748efd6445f792d547bc51a2be636d249443", "parents": [ "1736fe1d50b205f718281a94035fd66f14d72ef5" ], "author": { "name": "Evgenii Kliuchnikov", "email": "eustas@google.com", "time": "Thu May 14 01:08:06 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu May 14 01:09:52 2026 -0700" }, "message": "make narrowing conversion explicit\n\nPiperOrigin-RevId: 915286311\n" }, { "commit": "1736fe1d50b205f718281a94035fd66f14d72ef5", "tree": "12ed498017ba5dd931aca618981b06b33e3026d4", "parents": [ "af041f55e7bfa3e1bc502f234538e1d6dd6282bd" ], "author": { "name": "Evgenii Kliuchnikov", "email": "eustas@google.com", "time": "Wed May 13 02:21:37 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed May 13 02:22:01 2026 -0700" }, "message": "Clarify RAW dictionary size limits.\n\nMake decoder addon (chunked dictionary) fields unsigned.\nAdd comments about expected value ranges.\n\nPiperOrigin-RevId: 914736171\n" }, { "commit": "af041f55e7bfa3e1bc502f234538e1d6dd6282bd", "tree": "168ee141d5abcd413f5871219c13ee247ed914ca", "parents": [ "db4dfda9e1d417dabe3abf1bdedf3d9a9cc3b1ef" ], "author": { "name": "Brotli", "email": "no-reply@google.com", "time": "Tue May 05 09:37:03 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue May 05 09:37:27 2026 -0700" }, "message": "Automated Code Change\n\nPiperOrigin-RevId: 910740603\n" }, { "commit": "db4dfda9e1d417dabe3abf1bdedf3d9a9cc3b1ef", "tree": "1ada4a074a6d632b48409031504408e6af460981", "parents": [ "ab685df8343d8046226ece980408e958c10f9085", "7d9d5207126934cc5a775a0b0cfe0fecfbc28eb5" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon May 04 02:31:46 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon May 04 02:31:46 2026 -0700" }, "message": "Merge pull request #1463 from parasol-aser:fix/copystat-toctou-1461\n\nPiperOrigin-RevId: 909898919\n" }, { "commit": "7d9d5207126934cc5a775a0b0cfe0fecfbc28eb5", "tree": "1ada4a074a6d632b48409031504408e6af460981", "parents": [ "da05ef838ccbe8af981b2e691e23fb2095db3f70" ], "author": { "name": "parasol-aser", "email": "3848358+parasol-aser@users.noreply.github.com", "time": "Thu Apr 30 16:20:46 2026 +0000" }, "committer": { "name": "parasol-aser", "email": "3848358+parasol-aser@users.noreply.github.com", "time": "Thu Apr 30 17:19:28 2026 +0000" }, "message": "Convert CopyStat regression tests to Python suite\n" }, { "commit": "da05ef838ccbe8af981b2e691e23fb2095db3f70", "tree": "b260353fa965bdb108748c7b4b3f1accedee0f96", "parents": [ "ab685df8343d8046226ece980408e958c10f9085" ], "author": { "name": "parasol-aser", "email": "3848358+parasol-aser@users.noreply.github.com", "time": "Sun Apr 19 17:14:00 2026 +0000" }, "committer": { "name": "parasol-aser", "email": "3848358+parasol-aser@users.noreply.github.com", "time": "Thu Apr 30 17:19:28 2026 +0000" }, "message": "Fix CopyStat TOCTOU in brotli CLI by using fd-based syscalls\n\nCloseFiles() previously called fclose(context-\u003efout) before invoking\nCopyStat() on the output pathname. CopyStat() then used path-based\nchmod() and chown(), which gave an attacker with write access to the\noutput directory a window to replace the path with a symlink between\nthe close and the metadata syscalls, redirecting the chmod/chown to an\narbitrary target.\n\nClose the race by doing the metadata copy while the output file is\nstill open and by switching to fd-based syscalls on fileno(fout):\n\n- CopyStat() now takes FILE* fout and calls fchmod()/fchown() on the\n underlying fd.\n- CopyTimeStat() uses futimens(fd, ...) in the HAVE_UTIMENSAT branch;\n the legacy utime() fallback is preserved for platforms without it.\n- CloseFiles() invokes CopyStat() before fclose() and skips it when\n current_output_path is NULL (stdout), matching the issue\u0027s guidance.\n- Windows no-op shims updated from chmod/chown to fchmod/fchown.\n\nAdds deterministic regression coverage under tests/regression/t01/:\nan LD_PRELOAD fclose() swap reproduces the pre-fix behavior, and a\nnegative-assertion wrapper confirms the attack no longer succeeds\nafter the patch. Additional scripts cover mode/timestamp propagation,\nthe -n (no-copy-stat) flag, stdin input, stdout output, mode mask, and\nroundtrip correctness.\n\nRefs google/brotli#1461\n" }, { "commit": "81d3468a1ae2b7ea16be31c457b52a92e9e47795", "tree": "bf2f91e85419fd11c1ea84aa4f4fa17c1b4f0d94", "parents": [ "ab685df8343d8046226ece980408e958c10f9085" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 21 08:23:51 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 21 08:23:51 2026 +0000" }, "message": "Bump actions/setup-node from 6.3.0 to 6.4.0\n\nBumps [actions/setup-node](https://github.com/actions/setup-node) from 6.3.0 to 6.4.0.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/53b83947a5a98c8d113130e565377fae1a50d02f...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-node\n dependency-version: 6.4.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "ab685df8343d8046226ece980408e958c10f9085", "tree": "483b1291ef644fa5e62080be1c95c3f10e8a1eb9", "parents": [ "737ae47a02a4333607885c464e88ad2214398900", "0b30317d4ac233301d1e61e3b4b7ecb65a99ab38" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Apr 16 02:49:59 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Apr 16 02:49:59 2026 -0700" }, "message": "Merge pull request #1458 from rbri:java_code_cleanup\n\nPiperOrigin-RevId: 900612609\n" }, { "commit": "0b30317d4ac233301d1e61e3b4b7ecb65a99ab38", "tree": "483b1291ef644fa5e62080be1c95c3f10e8a1eb9", "parents": [ "737ae47a02a4333607885c464e88ad2214398900" ], "author": { "name": "Ronald Brill", "email": "rbri@rbri.de", "time": "Wed Apr 15 12:47:51 2026 +0200" }, "committer": { "name": "RBRi", "email": "rbri@rbri.de", "time": "Wed Apr 15 12:53:05 2026 +0200" }, "message": "use try-with-resources\n" }, { "commit": "737ae47a02a4333607885c464e88ad2214398900", "tree": "83e9db1b5900f55f97115e1608c7d6f384723930", "parents": [ "b3dc9ccd61129984c6a4c2d572c99ae181f0dc3c", "66e47ccf02733e70270e01a1d498ecb8fa4b3a3f" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Apr 15 01:12:13 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Apr 15 01:12:13 2026 -0700" }, "message": "Merge pull request #1453 from 0xazanul:fix/cli-comment-verification-return\n\nPiperOrigin-RevId: 900007299\n" }, { "commit": "66e47ccf02733e70270e01a1d498ecb8fa4b3a3f", "tree": "83e9db1b5900f55f97115e1608c7d6f384723930", "parents": [ "ba70577a2b37ed58599cd2a9297ab5194b99a29c", "b3dc9ccd61129984c6a4c2d572c99ae181f0dc3c" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Tue Apr 14 14:54:37 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 14 14:54:37 2026 +0200" }, "message": "Merge branch \u0027master\u0027 into fix/cli-comment-verification-return" }, { "commit": "b3dc9ccd61129984c6a4c2d572c99ae181f0dc3c", "tree": "b33bb43a1dfe79321e11ef01698f03870c8f6631", "parents": [ "fa0e46159bfac9a6445b3eb4de09dd52d09d24d0", "7783fe7ff337c62c49d2a1122fa5bce7a5712883" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Apr 14 05:46:06 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Apr 14 05:46:06 2026 -0700" }, "message": "Merge pull request #1457 from google:dependabot/github_actions/actions/cache-5.0.5\n\nPiperOrigin-RevId: 899533563\n" }, { "commit": "ba70577a2b37ed58599cd2a9297ab5194b99a29c", "tree": "4817661fdcbbc1f9b1b0dccd867f7b931fea56f2", "parents": [ "789eaf2fa8b3c4775df7b786b287bea73886313a", "fa0e46159bfac9a6445b3eb4de09dd52d09d24d0" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Tue Apr 14 14:28:26 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 14 14:28:26 2026 +0200" }, "message": "Merge branch \u0027master\u0027 into fix/cli-comment-verification-return" }, { "commit": "fa0e46159bfac9a6445b3eb4de09dd52d09d24d0", "tree": "5ab5fe6f9d3579fae05d14572f6d76ced6a1dff4", "parents": [ "f9f3a8cbf94a5f8fc761ba6f4257d19e2bb975b8" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 14 14:27:51 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 14 14:27:51 2026 +0200" }, "message": "Bump actions/cache from 5.0.4 to 5.0.5 (#1457)\n\nBumps [actions/cache](https://github.com/actions/cache) from 5.0.4 to 5.0.5.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/668228422ae6a00e4ad889ee87cd7109ec5666a7...27d5ce7f107fe9357f9df03efb73ab90386fccae)\n\n---\nupdated-dependencies:\n- dependency-name: actions/cache\n dependency-version: 5.0.5\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Eugene Kliuchnikov \u003ceustas.ru@gmail.com\u003e" }, { "commit": "7783fe7ff337c62c49d2a1122fa5bce7a5712883", "tree": "5ab5fe6f9d3579fae05d14572f6d76ced6a1dff4", "parents": [ "9b01217df4c87950811a2fe944dc756732726c9d", "f9f3a8cbf94a5f8fc761ba6f4257d19e2bb975b8" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Tue Apr 14 14:14:50 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 14 14:14:50 2026 +0200" }, "message": "Merge branch \u0027master\u0027 into dependabot/github_actions/actions/cache-5.0.5" }, { "commit": "f9f3a8cbf94a5f8fc761ba6f4257d19e2bb975b8", "tree": "46a142bc36382d91996dc3485166f761b5e6c7c8", "parents": [ "092429c5d4193143f1058fe0e2ff9c1f47a715ab" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 14 14:14:29 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 14 14:14:29 2026 +0200" }, "message": "Bump mymindstorm/setup-emsdk from 15 to 16 (#1456)\n\nBumps [mymindstorm/setup-emsdk](https://github.com/mymindstorm/setup-emsdk) from 15 to 16.\n- [Release notes](https://github.com/mymindstorm/setup-emsdk/releases)\n- [Commits](https://github.com/mymindstorm/setup-emsdk/compare/667eb33f24e84e7f362c16d8d7fff0629a73e15e...4528d102f7230f0e7b276855c01ea1159be0e984)\n\n---\nupdated-dependencies:\n- dependency-name: mymindstorm/setup-emsdk\n dependency-version: \u002716\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Eugene Kliuchnikov \u003ceustas.ru@gmail.com\u003e" }, { "commit": "9b01217df4c87950811a2fe944dc756732726c9d", "tree": "33b814ce2ccaed7e26660f599e12b63bf593fc94", "parents": [ "092429c5d4193143f1058fe0e2ff9c1f47a715ab" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 14 11:07:10 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 14 11:07:10 2026 +0000" }, "message": "Bump actions/cache from 5.0.4 to 5.0.5\n\nBumps [actions/cache](https://github.com/actions/cache) from 5.0.4 to 5.0.5.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/668228422ae6a00e4ad889ee87cd7109ec5666a7...27d5ce7f107fe9357f9df03efb73ab90386fccae)\n\n---\nupdated-dependencies:\n- dependency-name: actions/cache\n dependency-version: 5.0.5\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "092429c5d4193143f1058fe0e2ff9c1f47a715ab", "tree": "f1f561087a9936a60515c451e92d468d818198f3", "parents": [ "1dd49e190f6cfccccea4bbe95943c7f74281b0b1" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 14 13:06:07 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 14 13:06:07 2026 +0200" }, "message": "Bump step-security/harden-runner from 2.16.1 to 2.17.0 (#1455)\n\nBumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.16.1 to 2.17.0.\n- [Release notes](https://github.com/step-security/harden-runner/releases)\n- [Commits](https://github.com/step-security/harden-runner/compare/fe104658747b27e96e4f7e80cd0a94068e53901d...f808768d1510423e83855289c910610ca9b43176)\n\n---\nupdated-dependencies:\n- dependency-name: step-security/harden-runner\n dependency-version: 2.17.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Eugene Kliuchnikov \u003ceustas.ru@gmail.com\u003e" }, { "commit": "1dd49e190f6cfccccea4bbe95943c7f74281b0b1", "tree": "9fe7a247d462bd7e8ea5da521064ef408ca476e7", "parents": [ "4236b8587950611f12a581ff0a5696f9b00ace3d", "b7d03391c95bede529ee712f476e9c1659839404" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Apr 14 03:50:27 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Apr 14 03:50:27 2026 -0700" }, "message": "Merge pull request #1444 from robinwatts:master\n\nPiperOrigin-RevId: 899489367\n" }, { "commit": "4236b8587950611f12a581ff0a5696f9b00ace3d", "tree": "7b4d3a7b71e43dc0ba09b3feb1e43df09693e316", "parents": [ "37fd9c5c77cdf9289e71d31cd531d1f34dc3be14" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Apr 14 12:07:36 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Apr 14 12:07:36 2026 +0200" }, "message": "Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#1454)\n\nBumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifact\n dependency-version: 7.0.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e" }, { "commit": "ea0e8289c98e68c63f1447021cebbf3014cc1020", "tree": "4a15f70146a44f59914c5d4ecae0f53992c3432a", "parents": [ "eff4cbb0f11290ff13f26f2f79afefbe3d0aa90b", "37fd9c5c77cdf9289e71d31cd531d1f34dc3be14" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Mon Apr 13 10:52:34 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 13 10:52:34 2026 +0200" }, "message": "Merge branch \u0027master\u0027 into bcr" }, { "commit": "789eaf2fa8b3c4775df7b786b287bea73886313a", "tree": "40e19f5a2bb5bbaf934edbe32b5832cf2a2c244b", "parents": [ "2868c3ac9bd57bd611baf607fc028116af3f5e7c", "37fd9c5c77cdf9289e71d31cd531d1f34dc3be14" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Mon Apr 13 10:47:50 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 13 10:47:50 2026 +0200" }, "message": "Merge branch \u0027master\u0027 into fix/cli-comment-verification-return" }, { "commit": "b7d03391c95bede529ee712f476e9c1659839404", "tree": "9fe7a247d462bd7e8ea5da521064ef408ca476e7", "parents": [ "b1e421fdc71d9fa451d7624d5123926bb647655f", "37fd9c5c77cdf9289e71d31cd531d1f34dc3be14" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Mon Apr 13 10:09:36 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 13 10:09:36 2026 +0200" }, "message": "Merge branch \u0027master\u0027 into master" }, { "commit": "37fd9c5c77cdf9289e71d31cd531d1f34dc3be14", "tree": "cb56110bd1b732a2002f1f80c326fb8f5b56de31", "parents": [ "0f75f74b2422b2b5eabcd74a83307de95b53aeca", "8744a23812a0de7d78a5654b0cfa7019ab1c6d2f" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Apr 13 01:08:57 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Apr 13 01:08:57 2026 -0700" }, "message": "Merge pull request #1440 from google:dependabot/github_actions/github/codeql-action-4.35.1\n\nPiperOrigin-RevId: 898835966\n" }, { "commit": "b1e421fdc71d9fa451d7624d5123926bb647655f", "tree": "506e66dd7ed878c5cd515ee1a8b3cfbd74f58694", "parents": [ "7c2def18f6178da4c0c6016d49a44c1552dff9f8", "0f75f74b2422b2b5eabcd74a83307de95b53aeca" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Mon Apr 13 10:08:41 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 13 10:08:41 2026 +0200" }, "message": "Merge branch \u0027master\u0027 into master" }, { "commit": "0f75f74b2422b2b5eabcd74a83307de95b53aeca", "tree": "c8567a0828a24cfcc4fb4d4548aa69ed23e86b58", "parents": [ "69ac87248e1a5c18e80cf069a9dacf80b57bbde0" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Apr 13 09:38:31 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 13 09:38:31 2026 +0200" }, "message": "Bump github/codeql-action from 4.31.7 to 4.35.1 (#1440)\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.7 to 4.35.1.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/cf1bb45a277cb3c205638b2cd5c984db1c46a412...c10b8064de6f491fea524254123dbe5e09572f13)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n dependency-version: 4.35.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Eugene Kliuchnikov \u003ceustas.ru@gmail.com\u003e" }, { "commit": "8744a23812a0de7d78a5654b0cfa7019ab1c6d2f", "tree": "c8567a0828a24cfcc4fb4d4548aa69ed23e86b58", "parents": [ "4d7d0bd01237590b81bca474a5a857d800ce9266", "69ac87248e1a5c18e80cf069a9dacf80b57bbde0" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Mon Apr 13 09:38:18 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 13 09:38:18 2026 +0200" }, "message": "Merge branch \u0027master\u0027 into dependabot/github_actions/github/codeql-action-4.35.1" }, { "commit": "4d7d0bd01237590b81bca474a5a857d800ce9266", "tree": "3e2c35d3dd6da9bfcd661132d6cfc1c1fb1459c7", "parents": [ "918ef4751bb502284c6e8d94f5b1e2d5faa4d819" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Apr 13 07:38:09 2026 +0000" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 13 07:38:09 2026 +0000" }, "message": "Bump github/codeql-action from 4.31.7 to 4.35.1\n\nBumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.7 to 4.35.1.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/cf1bb45a277cb3c205638b2cd5c984db1c46a412...c10b8064de6f491fea524254123dbe5e09572f13)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action\n dependency-version: 4.35.1\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e" }, { "commit": "69ac87248e1a5c18e80cf069a9dacf80b57bbde0", "tree": "3f22795492df177e502f6a78a480f5f5f9d7886c", "parents": [ "918ef4751bb502284c6e8d94f5b1e2d5faa4d819" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Apr 13 09:37:45 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 13 09:37:45 2026 +0200" }, "message": "Bump actions/download-artifact from 6.0.0 to 8.0.1 (#1441)\n\nBumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6.0.0 to 8.0.1.\n- [Release notes](https://github.com/actions/download-artifact/releases)\n- [Commits](https://github.com/actions/download-artifact/compare/018cc2cf5baa6db3ef3c5f8a56943fffe632ef53...3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c)\n\n---\nupdated-dependencies:\n- dependency-name: actions/download-artifact\n dependency-version: 8.0.1\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Eugene Kliuchnikov \u003ceustas.ru@gmail.com\u003e" }, { "commit": "918ef4751bb502284c6e8d94f5b1e2d5faa4d819", "tree": "eefeeb09902c13ca46a9598fd0e9f2b7e3adb576", "parents": [ "183bb3a8103ede51aad8fca581441ea30f904341" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Apr 13 09:37:07 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 13 09:37:07 2026 +0200" }, "message": "Bump actions/setup-python from 6.1.0 to 6.2.0 (#1442)\n\nBumps [actions/setup-python](https://github.com/actions/setup-python) from 6.1.0 to 6.2.0.\n- [Release notes](https://github.com/actions/setup-python/releases)\n- [Commits](https://github.com/actions/setup-python/compare/83679a892e2d95755f2dac6acb0bfd1e9ac5d548...a309ff8b426b58ec0e2a45f0f869d46889d02405)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-python\n dependency-version: 6.2.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Eugene Kliuchnikov \u003ceustas.ru@gmail.com\u003e" }, { "commit": "183bb3a8103ede51aad8fca581441ea30f904341", "tree": "413a648a2e27873a40a3a633a411babff04494b1", "parents": [ "0cd3d878742ea81d174ec114f7255f9b0c08512e" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Apr 13 09:35:05 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 13 09:35:05 2026 +0200" }, "message": "Bump step-security/harden-runner from 2.16.0 to 2.16.1 (#1445)\n\nBumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.16.0 to 2.16.1.\n- [Release notes](https://github.com/step-security/harden-runner/releases)\n- [Commits](https://github.com/step-security/harden-runner/compare/fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594...fe104658747b27e96e4f7e80cd0a94068e53901d)\n\n---\nupdated-dependencies:\n- dependency-name: step-security/harden-runner\n dependency-version: 2.16.1\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Eugene Kliuchnikov \u003ceustas.ru@gmail.com\u003e" }, { "commit": "0cd3d878742ea81d174ec114f7255f9b0c08512e", "tree": "9d1b73cc42ad66677e27c5b57217747cbdb6a1fa", "parents": [ "bad6cb59b5534f284d69f6f48f708fbbfed05391" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Mon Apr 13 09:33:45 2026 +0200" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Mon Apr 13 09:33:45 2026 +0200" }, "message": "Bump mymindstorm/setup-emsdk from 14 to 15 (#1446)\n\nBumps [mymindstorm/setup-emsdk](https://github.com/mymindstorm/setup-emsdk) from 14 to 15.\n- [Release notes](https://github.com/mymindstorm/setup-emsdk/releases)\n- [Commits](https://github.com/mymindstorm/setup-emsdk/compare/6ab9eb1bda2574c4ddb79809fc9247783eaf9021...667eb33f24e84e7f362c16d8d7fff0629a73e15e)\n\n---\nupdated-dependencies:\n- dependency-name: mymindstorm/setup-emsdk\n dependency-version: \u002715\u0027\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Eugene Kliuchnikov \u003ceustas.ru@gmail.com\u003e" }, { "commit": "2868c3ac9bd57bd611baf607fc028116af3f5e7c", "tree": "9e851e8fd0e96128e183f264f82a006bdbed3d15", "parents": [ "5583858f76d244974672b902378f041ef3fdcac9" ], "author": { "name": "Your Name", "email": "azanulworkspace@gmail.com", "time": "Sat Apr 11 16:37:53 2026 +0530" }, "committer": { "name": "Your Name", "email": "azanulworkspace@gmail.com", "time": "Sat Apr 11 16:37:53 2026 +0530" }, "message": "Return failure on comment mismatch in CLI decompression\n\nThe final comment verification check in DecompressFile() detects when\ncomment_state is not COMMENT_OK but unconditionally returns BROTLI_TRUE.\nThis causes the -C (comment verification) flag to accept streams with\nmissing or mismatched comments, keeping the output file and exiting 0.\n\nAdd the missing return BROTLI_FALSE inside the mismatch branch so that\ncomment verification failures are properly propagated to the caller.\n" }, { "commit": "bad6cb59b5534f284d69f6f48f708fbbfed05391", "tree": "bd41e63e3ae205934f57431cb8994946d69ee2ba", "parents": [ "4792c8e4c4235f6b501f13dbd07a8b4b253eee21" ], "author": { "name": "Evgenii Kliuchnikov", "email": "eustas@google.com", "time": "Thu Apr 09 02:27:48 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Apr 09 02:28:14 2026 -0700" }, "message": "Make all BrotliOutputStream methods exclusive/blocking.\n\nIf access is naturally exclusive, then it is nearly zero-cost (1 atomic CAS)\n\nPiperOrigin-RevId: 896977751\n" }, { "commit": "4792c8e4c4235f6b501f13dbd07a8b4b253eee21", "tree": "0ff674883a7e9e6dc211de76870f38427882f88e", "parents": [ "88b27d494d219e6a8b033d358aafb6778e7656b3" ], "author": { "name": "Evgenii Kliuchnikov", "email": "eustas@google.com", "time": "Wed Apr 08 12:24:03 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Apr 08 12:24:31 2026 -0700" }, "message": "Check that total compound dictionary size does not overflow.\n\nThanks to @0xazanul who reported the problem in #1438\n\nPiperOrigin-RevId: 896638456\n" }, { "commit": "88b27d494d219e6a8b033d358aafb6778e7656b3", "tree": "21ed02919346a6078e6f51e6822da9831156675c", "parents": [ "5583858f76d244974672b902378f041ef3fdcac9" ], "author": { "name": "Evgenii Kliuchnikov", "email": "eustas@google.com", "time": "Wed Apr 08 08:00:10 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Apr 08 08:00:31 2026 -0700" }, "message": "Fix partial javadocs\n\nPiperOrigin-RevId: 896503460\n" }, { "commit": "7c2def18f6178da4c0c6016d49a44c1552dff9f8", "tree": "b7f0bf3968e1397d7d38c0bbc6977de634b15505", "parents": [ "5583858f76d244974672b902378f041ef3fdcac9" ], "author": { "name": "Robin Watts", "email": "Robin.Watts@artifex.com", "time": "Fri Apr 03 19:02:53 2026 +0100" }, "committer": { "name": "Robin Watts", "email": "Robin.Watts@artifex.com", "time": "Fri Apr 03 19:04:09 2026 +0100" }, "message": "Fix compilation in ISO C enviroments; declare vars before code.\n" }, { "commit": "5583858f76d244974672b902378f041ef3fdcac9", "tree": "0cb8cce9bc4d587918b51e39bb6d3eae9c10a353", "parents": [ "a0f8a2c9ba081d27e87eb306bc6dcbd968ad347f", "538c014676e44e915bd9ddda750bcaf89a25501c" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Mar 26 01:40:30 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Mar 26 01:40:30 2026 -0700" }, "message": "Merge pull request #1413 from leofernandesmo:fix-java-brotliinputstream-null-buffer\n\nPiperOrigin-RevId: 889691589\n" }, { "commit": "a0f8a2c9ba081d27e87eb306bc6dcbd968ad347f", "tree": "40d9899e4bd3295bdf7085c976ea7b6bc4649cbf", "parents": [ "495f30f8fd9713fa23fda1e7364aac4d8ee829bc", "77b1773bc45e9793b06c2e949ac6eee3fe061b70" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Mar 26 01:36:35 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Mar 26 01:36:35 2026 -0700" }, "message": "Merge pull request #1382 from vanschelven:fix-python-docstring\n\nPiperOrigin-RevId: 889690037\n" }, { "commit": "495f30f8fd9713fa23fda1e7364aac4d8ee829bc", "tree": "3ee6db89df7baedd22a90ec46f1da39292f79969", "parents": [ "965c18ebe774802be286d7fc541fcc64f129340c", "e1d9ad3ccaba12df816d8a3a8525622d3ed1db5a" ], "author": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Mar 26 01:12:38 2026 -0700" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Mar 26 01:12:38 2026 -0700" }, "message": "Merge pull request #1414 from leofernandesmo:fix-java-brotliinputstream-illegalstateexception\n\nPiperOrigin-RevId: 889681811\n" }, { "commit": "77b1773bc45e9793b06c2e949ac6eee3fe061b70", "tree": "9577faba9c91917760ca47789e1950412de0cadb", "parents": [ "295d9c74d35e7bf14fd4339834f47fa934948e57", "965c18ebe774802be286d7fc541fcc64f129340c" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Thu Mar 26 08:31:18 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Mar 26 08:31:18 2026 +0100" }, "message": "Merge branch \u0027master\u0027 into fix-python-docstring" }, { "commit": "538c014676e44e915bd9ddda750bcaf89a25501c", "tree": "d947f576a0a495f53ba171b61f6abb30a0f6cb08", "parents": [ "e7f00f63486c7aee45b5770a83bfd9e37f794b65", "965c18ebe774802be286d7fc541fcc64f129340c" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Thu Mar 26 08:19:58 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Mar 26 08:19:58 2026 +0100" }, "message": "Merge branch \u0027master\u0027 into fix-java-brotliinputstream-null-buffer" }, { "commit": "e1d9ad3ccaba12df816d8a3a8525622d3ed1db5a", "tree": "3ee6db89df7baedd22a90ec46f1da39292f79969", "parents": [ "2c214287ff837b262ff4b2c59c78031f22dd6c4e", "965c18ebe774802be286d7fc541fcc64f129340c" ], "author": { "name": "Eugene Kliuchnikov", "email": "eustas.ru@gmail.com", "time": "Thu Mar 26 08:13:21 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Thu Mar 26 08:13:21 2026 +0100" }, "message": "Merge branch \u0027master\u0027 into fix-java-brotliinputstream-illegalstateexception" }, { "commit": "965c18ebe774802be286d7fc541fcc64f129340c", "tree": "b2c5cde6cb5fc84d4eb7545a194a7b3a867a81f4", "parents": [ "3aa085d8b3fb73aaa5e710ce0ffc0b43a5d12f76" ], "author": { "name": "dependabot[bot]", "email": "49699333+dependabot[bot]@users.noreply.github.com", "time": "Tue Mar 24 10:53:34 2026 +0100" }, "committer": { "name": "GitHub", "email": "noreply@github.com", "time": "Tue Mar 24 10:53:34 2026 +0100" }, "message": "Bump actions/setup-node from 6.0.0 to 6.3.0 (#1432)\n\nBumps [actions/setup-node](https://github.com/actions/setup-node) from 6.0.0 to 6.3.0.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/2028fbc5c25fe9cf00d9f06a71cc4710d4507903...53b83947a5a98c8d113130e565377fae1a50d02f)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-node\n dependency-version: 6.3.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Eugene Kliuchnikov \u003ceustas.ru@gmail.com\u003e" } ], "next": "3aa085d8b3fb73aaa5e710ce0ffc0b43a5d12f76" }