\r\n
\r\n\r\n---\r\n\r\n### Configuration\r\n\r\n📅 **Schedule**: Branch creation - \"before 6am on wednesday\" in timezone\r\nAustralia/Sydney, Automerge - At any time (no schedule defined).\r\n\r\n🚦 **Automerge**: Disabled by config. Please merge this manually once you\r\nare satisfied.\r\n\r\n♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the\r\nrebase/retry checkbox.\r\n\r\n🔕 **Ignore**: Close this PR and you won't be reminded about these\r\nupdates again.\r\n\r\n---\r\n\r\n- [ ] If you want to rebase/retry this PR, check\r\nthis box\r\n\r\n---\r\n\r\nThis PR was generated by [Mend\r\nRenovate](https://www.mend.io/free-developer-tools/renovate/). View the\r\n[repository job log](https://developer.mend.io/github/google/osv.dev).\r\n\r\n","shortMessageHtmlLink":"fix(deps): update docs to v2.22.0 (#2501)"}},{"before":"457cb8c016d76f8fed49fc6bc37466cda42e9a03","after":"32f9c898610256f577aef39b5590760ec6a49d07","ref":"refs/heads/master","pushedAt":"2024-08-23T05:43:09.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"fix(deps): manually update docs Ruby deps (#2519)\n\nManual reproduction of the Ruby dependency update from #2501 that seems\r\nto be glitching:\r\nhttps://github.com/google/osv.dev/pull/2501#issuecomment-2298972141","shortMessageHtmlLink":"fix(deps): manually update docs Ruby deps (#2519)"}},{"before":"af69902d473c9ac75b68dfbb6515dbef37df2421","after":"457cb8c016d76f8fed49fc6bc37466cda42e9a03","ref":"refs/heads/master","pushedAt":"2024-08-23T05:15:22.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"fix(nvd-mirror): use a more efficient technique to split NVD by year (#2517)\n\nTo address apparent overrun issues (and also hopefully reduce the amount\r\nof RAM the job requires) use a more time and memory efficient technique\r\nto split the monolithic NVD dump by year.\r\n\r\nThis avoids creating multiple in-memory arrays of the same data\r\n\r\nRefactor invocation for better readability","shortMessageHtmlLink":"fix(nvd-mirror): use a more efficient technique to split NVD by year (#…"}},{"before":"fa75d48dde06bc97c830789ae0ebc84f34c1c9e6","after":"af69902d473c9ac75b68dfbb6515dbef37df2421","ref":"refs/heads/master","pushedAt":"2024-08-23T05:02:05.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hogo6002","name":"Holly Gong","path":"/hogo6002","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/39108850?s=80&v=4"},"commit":{"message":"fix: handle invalid version input in ecosystem sort_key (#2515)\n\nSome ecosystem `sort_key` functions do not validate versions before\r\nconverting them to their ecosystem-specific formats. This leads to\r\nseveral errors occur when using `sort_key` to compare user-input\r\nversions with affected ranges.\r\n\r\nAdd version validation before conversion to ensure no errors occur.","shortMessageHtmlLink":"fix: handle invalid version input in ecosystem sort_key (#2515)"}},{"before":"2593e816fde1bdb3804418c62f89a4c2c2605c5c","after":"fa75d48dde06bc97c830789ae0ebc84f34c1c9e6","ref":"refs/heads/master","pushedAt":"2024-08-23T03:17:42.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hogo6002","name":"Holly Gong","path":"/hogo6002","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/39108850?s=80&v=4"},"commit":{"message":"feat: enable new version query approach on test instance (#2516)\n\nRe-enable and optimise the query by checking the affected versions\r\nfirst.","shortMessageHtmlLink":"feat: enable new version query approach on test instance (#2516)"}},{"before":"57c03cb9f7fdbbd9ec48877b28e730880340339b","after":"2593e816fde1bdb3804418c62f89a4c2c2605c5c","ref":"refs/heads/master","pushedAt":"2024-08-23T03:14:34.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hogo6002","name":"Holly Gong","path":"/hogo6002","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/39108850?s=80&v=4"},"commit":{"message":"feat(tools): allow deleting bugs from file (#2508)\n\n- Allow saving queried bug IDs to a file.\r\n- Allow deleting bugs from a specified file. \r\n\r\nThis is useful when we don't want to delete all bugs from a `source` at\r\nonce and need to filter the bugs before deleting them.","shortMessageHtmlLink":"feat(tools): allow deleting bugs from file (#2508)"}},{"before":"773a0c77180ae8b1da8b059e88c8dc080908ff8d","after":"57c03cb9f7fdbbd9ec48877b28e730880340339b","ref":"refs/heads/master","pushedAt":"2024-08-23T02:14:09.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"another-rex","name":"Rex P","path":"/another-rex","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/106129829?s=80&v=4"},"commit":{"message":"fix: Add docstring, fix issue with BadArgumentError (#2506)\n\nCo-authored-by: Andrew Pollock grpc-ecosystem/grpc-gateway\r\n(github.com/grpc-ecosystem/grpc-gateway/v2)
\r\n\r\n###\r\n[`v2.22.0`](https://togithub.com/grpc-ecosystem/grpc-gateway/releases/tag/v2.22.0)\r\n\r\n[Compare\r\nSource](https://togithub.com/grpc-ecosystem/grpc-gateway/compare/v2.21.0...v2.22.0)\r\n\r\n#### What's Changed\r\n\r\n- docs: add example to fully override http responses by\r\n[@nguyentranbao-ct](https://togithub.com/nguyentranbao-ct) in\r\n[https://github.com/grpc-ecosystem/grpc-gateway/pull/4564](https://togithub.com/grpc-ecosystem/grpc-gateway/pull/4564)\r\n- stop printing error logs in handleForwardResponseOptions by\r\n[@taichimaeda](https://togithub.com/taichimaeda) in\r\n[https://github.com/grpc-ecosystem/grpc-gateway/pull/4594](https://togithub.com/grpc-ecosystem/grpc-gateway/pull/4594)\r\n- Add some documenation for CustomQueryParser with examples by\r\n[@texzone](https://togithub.com/texzone) in\r\n[https://github.com/grpc-ecosystem/grpc-gateway/pull/4602](https://togithub.com/grpc-ecosystem/grpc-gateway/pull/4602)\r\n- Fix\r\n[#4614](https://togithub.com/grpc-ecosystem/grpc-gateway/issues/4614)\r\nUnique Items placement by\r\n[@sebaraj](https://togithub.com/sebaraj) in\r\n[https://github.com/grpc-ecosystem/grpc-gateway/pull/4619](https://togithub.com/grpc-ecosystem/grpc-gateway/pull/4619)\r\n- all: fix test lint warnings by\r\n[@johanbrandhorst](https://togithub.com/johanbrandhorst) in\r\n[https://github.com/grpc-ecosystem/grpc-gateway/pull/4632](https://togithub.com/grpc-ecosystem/grpc-gateway/pull/4632)\r\n- ci: update go versions supported by\r\n[@johanbrandhorst](https://togithub.com/johanbrandhorst) in\r\n[https://github.com/grpc-ecosystem/grpc-gateway/pull/4634](https://togithub.com/grpc-ecosystem/grpc-gateway/pull/4634)\r\n- feat: Add WithForwardResponseRewriter to allow easier/more useful\r\nresponse control by [@nkcmr](https://togithub.com/nkcmr) in\r\n[https://github.com/grpc-ecosystem/grpc-gateway/pull/4622](https://togithub.com/grpc-ecosystem/grpc-gateway/pull/4622)\r\n\r\n#### New Contributors\r\n\r\n- [@nguyentranbao-ct](https://togithub.com/nguyentranbao-ct) made\r\ntheir first contribution in\r\n[https://github.com/grpc-ecosystem/grpc-gateway/pull/4564](https://togithub.com/grpc-ecosystem/grpc-gateway/pull/4564)\r\n- [@taichimaeda](https://togithub.com/taichimaeda) made their\r\nfirst contribution in\r\n[https://github.com/grpc-ecosystem/grpc-gateway/pull/4594](https://togithub.com/grpc-ecosystem/grpc-gateway/pull/4594)\r\n- [@texzone](https://togithub.com/texzone) made their first\r\ncontribution in\r\n[https://github.com/grpc-ecosystem/grpc-gateway/pull/4602](https://togithub.com/grpc-ecosystem/grpc-gateway/pull/4602)\r\n- [@sebaraj](https://togithub.com/sebaraj) made their first\r\ncontribution in\r\n[https://github.com/grpc-ecosystem/grpc-gateway/pull/4619](https://togithub.com/grpc-ecosystem/grpc-gateway/pull/4619)\r\n- [@nkcmr](https://togithub.com/nkcmr) made their first\r\ncontribution in\r\n[https://github.com/grpc-ecosystem/grpc-gateway/pull/4622](https://togithub.com/grpc-ecosystem/grpc-gateway/pull/4622)\r\n\r\n**Full Changelog**:\r\nhttps://github.com/grpc-ecosystem/grpc-gateway/compare/v2.21.0...v2.22.0\r\n\r\n\n
\n\ngoogleapis/python-logging (google-cloud-logging)
\n\n###\n[`v3.11.2`](https://togithub.com/googleapis/python-logging/blob/HEAD/CHANGELOG.md#3112-2024-08-15)\n\n[Compare\nSource](https://togithub.com/googleapis/python-logging/compare/v3.11.1...v3.11.2)\n\n##### Bug Fixes\n\n- **deps:** Require google-cloud-appengine-logging>=0.1.3\n([550abca](https://togithub.com/googleapis/python-logging/commit/550abca2846218d114a6b4b42cb165489e630374))\n- **deps:** Require google-cloud-audit-log >= 0.2.4\n([550abca](https://togithub.com/googleapis/python-logging/commit/550abca2846218d114a6b4b42cb165489e630374))\n- **deps:** Require opentelemetry-api>=1.9.0\n([550abca](https://togithub.com/googleapis/python-logging/commit/550abca2846218d114a6b4b42cb165489e630374))\n- Fixed type hinting issue with specifying Transport class\n([#930](https://togithub.com/googleapis/python-logging/issues/930))\n([e2875d6](https://togithub.com/googleapis/python-logging/commit/e2875d664c153a4328bd42790dfb7b4ac36a9048))\n\n\n
\n\n---\n\n### Configuration\n\n📅 **Schedule**: Branch creation - \"before 6am on wednesday\" in timezone\nAustralia/Sydney, Automerge - At any time (no schedule defined).\n\n🚦 **Automerge**: Disabled by config. Please merge this manually once you\nare satisfied.\n\n♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the\nrebase/retry checkbox.\n\n👻 **Immortal**: This PR will be recreated if closed unmerged. Get\n[config help](https://togithub.com/renovatebot/renovate/discussions) if\nthat's undesired.\n\n---\n\n- [ ] If you want to rebase/retry this PR, check\nthis box\n\n---\n\nThis PR was generated by [Mend\nRenovate](https://www.mend.io/free-developer-tools/renovate/). View the\n[repository job log](https://developer.mend.io/github/google/osv.dev).\n\n","shortMessageHtmlLink":"chore(deps): lock file maintenance osv-lib (#2505)"}},{"before":"909a13f863bedcd4e1d40232b504bfb99248383e","after":"85221a23e0e460a5b72e20d0c19866980f1df02a","ref":"refs/heads/master","pushedAt":"2024-08-22T05:37:49.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"chore(deps): lock file maintenance appengine-frontend (#2504)\n\n[](https://renovatebot.com)\n\nThis PR contains the following updates:\n\n| Package | Type | Update | Change | Age | Adoption | Passing |\nConfidence |\n|---|---|---|---|---|---|---|---|\n| | | lockFileMaintenance | All locks refreshed | | | | |\n|\n[mini-css-extract-plugin](https://togithub.com/webpack-contrib/mini-css-extract-plugin)\n| devDependencies | patch | [`2.9.0` ->\n`2.9.1`](https://renovatebot.com/diffs/npm/mini-css-extract-plugin/2.9.0/2.9.1)\n|\n[](https://docs.renovatebot.com/merge-confidence/)\n|\n[](https://docs.renovatebot.com/merge-confidence/)\n|\n[](https://docs.renovatebot.com/merge-confidence/)\n|\n[](https://docs.renovatebot.com/merge-confidence/)\n|\n\n🔧 This Pull Request updates lock files to use the latest dependency\nversions.\n\n---\n\n### Release Notes\n\ngrpc/grpc (grpcio)
\n\n### [`v1.65.5`](https://togithub.com/grpc/grpc/releases/tag/v1.65.5)\n\n[Compare\nSource](https://togithub.com/grpc/grpc/compare/v1.65.4...v1.65.5)\n\nThis is release gRPC Core 1.65.5 (gnarly).\n\nFor gRPC documentation, see [grpc.io](https://grpc.io/). For previous\nreleases, see [Releases](https://togithub.com/grpc/grpc/releases).\n\nThis release contains refinements, improvements, and bug fixes.\n\n\n
\n\n---\n\n### Configuration\n\n📅 **Schedule**: Branch creation - \"before 6am on wednesday\" in timezone\nAustralia/Sydney, Automerge - At any time (no schedule defined).\n\n🚦 **Automerge**: Disabled by config. Please merge this manually once you\nare satisfied.\n\n♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the\nrebase/retry checkbox.\n\n👻 **Immortal**: This PR will be recreated if closed unmerged. Get\n[config help](https://togithub.com/renovatebot/renovate/discussions) if\nthat's undesired.\n\n---\n\n- [ ] If you want to rebase/retry this PR, check\nthis box\n\n---\n\nThis PR was generated by [Mend\nRenovate](https://www.mend.io/free-developer-tools/renovate/). View the\n[repository job log](https://developer.mend.io/github/google/osv.dev).\n\n","shortMessageHtmlLink":"chore(deps): lock file maintenance appengine-frontend (#2504)"}},{"before":"f66ffcfe94d4c072895dc8b44f2f8ea64e4e8cd9","after":"909a13f863bedcd4e1d40232b504bfb99248383e","ref":"refs/heads/master","pushedAt":"2024-08-22T05:22:53.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"chore(deps): lock file maintenance appengine-backend (#2503)\n\n[](https://renovatebot.com)\n\nThis PR contains the following updates:\n\n| Package | Type | Update | Change | Age | Adoption | Passing |\nConfidence |\n|---|---|---|---|---|---|---|---|\n| | | lockFileMaintenance | All locks refreshed | | | | |\n| [google-cloud-logging](https://togithub.com/googleapis/python-logging)\n| dependencies | patch | `==3.11.0` -> `==3.11.2` |\n[](https://docs.renovatebot.com/merge-confidence/)\n|\n[](https://docs.renovatebot.com/merge-confidence/)\n|\n[](https://docs.renovatebot.com/merge-confidence/)\n|\n[](https://docs.renovatebot.com/merge-confidence/)\n|\n| werkzeug ([changelog](https://werkzeug.palletsprojects.com/changes/))\n| dependencies | patch | `==3.0.3` -> `==3.0.4` |\n[](https://docs.renovatebot.com/merge-confidence/)\n|\n[](https://docs.renovatebot.com/merge-confidence/)\n|\n[](https://docs.renovatebot.com/merge-confidence/)\n|\n[](https://docs.renovatebot.com/merge-confidence/)\n|\n\n🔧 This Pull Request updates lock files to use the latest dependency\nversions.\n\n---\n\n### Release Notes\n\nwebpack-contrib/mini-css-extract-plugin\n(mini-css-extract-plugin)
\n\n###\n[`v2.9.1`](https://togithub.com/webpack-contrib/mini-css-extract-plugin/blob/HEAD/CHANGELOG.md#291-2024-08-19)\n\n[Compare\nSource](https://togithub.com/webpack-contrib/mini-css-extract-plugin/compare/v2.9.0...v2.9.1)\n\n\n
\n\n---\n\n### Configuration\n\n📅 **Schedule**: Branch creation - \"before 6am on wednesday\" in timezone\nAustralia/Sydney, Automerge - At any time (no schedule defined).\n\n🚦 **Automerge**: Disabled by config. Please merge this manually once you\nare satisfied.\n\n♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the\nrebase/retry checkbox.\n\n👻 **Immortal**: This PR will be recreated if closed unmerged. Get\n[config help](https://togithub.com/renovatebot/renovate/discussions) if\nthat's undesired.\n\n---\n\n- [ ] If you want to rebase/retry this PR, check\nthis box\n\n---\n\nThis PR was generated by [Mend\nRenovate](https://www.mend.io/free-developer-tools/renovate/). View the\n[repository job log](https://developer.mend.io/github/google/osv.dev).\n\n","shortMessageHtmlLink":"chore(deps): lock file maintenance appengine-backend (#2503)"}},{"before":"0a9f62c84bf24f95dc6d3a78e17a98606c8c6d28","after":"f66ffcfe94d4c072895dc8b44f2f8ea64e4e8cd9","ref":"refs/heads/master","pushedAt":"2024-08-22T02:49:59.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"docs: link to Scorecard report viewer (#2510)\n\nMuch nicer to look at than a wall of JSON","shortMessageHtmlLink":"docs: link to Scorecard report viewer (#2510)"}},{"before":"1439e50f4a3ed89b06959c477999c6c3e746982b","after":"0a9f62c84bf24f95dc6d3a78e17a98606c8c6d28","ref":"refs/heads/master","pushedAt":"2024-08-22T01:34:38.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"chore(deps): lock file maintenance (#2502)\n\n[](https://renovatebot.com)\n\nThis PR contains the following updates:\n\n| Update | Change |\n|---|---|\n| lockFileMaintenance | All locks refreshed |\n\n🔧 This Pull Request updates lock files to use the latest dependency\nversions.\n\n---\n\n### Configuration\n\n📅 **Schedule**: Branch creation - \"before 6am on wednesday\" in timezone\nAustralia/Sydney, Automerge - At any time (no schedule defined).\n\n🚦 **Automerge**: Disabled by config. Please merge this manually once you\nare satisfied.\n\n♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the\nrebase/retry checkbox.\n\n👻 **Immortal**: This PR will be recreated if closed unmerged. Get\n[config help](https://togithub.com/renovatebot/renovate/discussions) if\nthat's undesired.\n\n---\n\n- [ ] If you want to rebase/retry this PR, check\nthis box\n\n---\n\nThis PR was generated by [Mend\nRenovate](https://www.mend.io/free-developer-tools/renovate/). View the\n[repository job log](https://developer.mend.io/github/google/osv.dev).\n\n","shortMessageHtmlLink":"chore(deps): lock file maintenance (#2502)"}},{"before":"2847b6e468987b72b307eff699a9e4571683cd68","after":"1439e50f4a3ed89b06959c477999c6c3e746982b","ref":"refs/heads/master","pushedAt":"2024-08-21T23:10:45.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"chore(deps): update gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine docker digest to be44246 (#2500)\n\n[](https://renovatebot.com)\n\nThis PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| gcr.io/google.com/cloudsdktool/google-cloud-cli | final | digest |\n`d5da034` -> `be44246` |\n\n---\n\n### Configuration\n\n📅 **Schedule**: Branch creation - \"before 6am on wednesday\" in timezone\nAustralia/Sydney, Automerge - At any time (no schedule defined).\n\n🚦 **Automerge**: Disabled by config. Please merge this manually once you\nare satisfied.\n\n♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the\nrebase/retry checkbox.\n\n🔕 **Ignore**: Close this PR and you won't be reminded about this update\nagain.\n\n---\n\n- [ ] If you want to rebase/retry this PR, check\nthis box\n\n---\n\nThis PR was generated by [Mend\nRenovate](https://www.mend.io/free-developer-tools/renovate/). View the\n[repository job log](https://developer.mend.io/github/google/osv.dev).\n\n","shortMessageHtmlLink":"chore(deps): update gcr.io/google.com/cloudsdktool/google-cloud-cli:a…"}},{"before":"c028941ea64013cb9e6d1909fdd5033070fcb777","after":"2847b6e468987b72b307eff699a9e4571683cd68","ref":"refs/heads/master","pushedAt":"2024-08-21T08:37:58.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hogo6002","name":"Holly Gong","path":"/hogo6002","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/39108850?s=80&v=4"},"commit":{"message":"fix: missing Packages for some malicious packages (#2479)\n\nhttps://github.com/google/osv.dev/issues/2422\r\n\r\nDisplay \"Not specified\" if packages is missed in the vulnerability\r\ndetails\r\n\r\nBefore fix:\r\ngoogleapis/python-logging (google-cloud-logging)
\n\n###\n[`v3.11.2`](https://togithub.com/googleapis/python-logging/blob/HEAD/CHANGELOG.md#3112-2024-08-15)\n\n[Compare\nSource](https://togithub.com/googleapis/python-logging/compare/v3.11.1...v3.11.2)\n\n##### Bug Fixes\n\n- **deps:** Require google-cloud-appengine-logging>=0.1.3\n([550abca](https://togithub.com/googleapis/python-logging/commit/550abca2846218d114a6b4b42cb165489e630374))\n- **deps:** Require google-cloud-audit-log >= 0.2.4\n([550abca](https://togithub.com/googleapis/python-logging/commit/550abca2846218d114a6b4b42cb165489e630374))\n- **deps:** Require opentelemetry-api>=1.9.0\n([550abca](https://togithub.com/googleapis/python-logging/commit/550abca2846218d114a6b4b42cb165489e630374))\n- Fixed type hinting issue with specifying Transport class\n([#930](https://togithub.com/googleapis/python-logging/issues/930))\n([e2875d6](https://togithub.com/googleapis/python-logging/commit/e2875d664c153a4328bd42790dfb7b4ac36a9048))\n\n###\n[`v3.11.1`](https://togithub.com/googleapis/python-logging/blob/HEAD/CHANGELOG.md#3111-2024-08-06)\n\n[Compare\nSource](https://togithub.com/googleapis/python-logging/compare/v3.11.0...v3.11.1)\n\n##### Bug Fixes\n\n- Allow protobuf 5.x\n([#888](https://togithub.com/googleapis/python-logging/issues/888))\n([7746e64](https://togithub.com/googleapis/python-logging/commit/7746e643af29b1008d6e6d6a9958c8337c958dd4))\n\n\n
\n\n---\n\n### Configuration\n\n📅 **Schedule**: Branch creation - \"before 6am on wednesday\" in timezone\nAustralia/Sydney, Automerge - At any time (no schedule defined).\n\n🚦 **Automerge**: Disabled by config. Please merge this manually once you\nare satisfied.\n\n♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the\nrebase/retry checkbox.\n\n👻 **Immortal**: This PR will be recreated if closed unmerged. Get\n[config help](https://togithub.com/renovatebot/renovate/discussions) if\nthat's undesired.\n\n---\n\n- [ ] If you want to rebase/retry this PR, check\nthis box\n\n---\n\nThis PR was generated by [Mend\nRenovate](https://www.mend.io/free-developer-tools/renovate/). View the\n[repository job log](https://developer.mend.io/github/google/osv.dev).\n\n","shortMessageHtmlLink":"chore(deps): lock file maintenance api (#2475)"}},{"before":"c3a6deb4b1e32f86430b30cc69b72f54821c0786","after":"439c6ecb64bc5f16738f92a10ff2aa4edb25ced6","ref":"refs/heads/master","pushedAt":"2024-08-21T06:17:19.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"build: repin distroless image dependency (#2507)\n\nThe previous hash was resulting in a weird error when pulling the image.\r\n\r\nVerified this hash by pulling it locally first.","shortMessageHtmlLink":"build: repin distroless image dependency (#2507)"}},{"before":"826105d7f18bf83412f7a4b28b612f7be8a2606d","after":"c3a6deb4b1e32f86430b30cc69b72f54821c0786","ref":"refs/heads/master","pushedAt":"2024-08-21T04:28:37.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hogo6002","name":"Holly Gong","path":"/hogo6002","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/39108850?s=80&v=4"},"commit":{"message":"feat(api-perf-test): revert API query to original method on test instance for A/B performance testing (#2492)\n\nTemporarily revert API query to original method on test instance for A/B\r\nperformance testing","shortMessageHtmlLink":"feat(api-perf-test): revert API query to original method on test inst…"}},{"before":"58fd10dd77a00521469d1c2ea71a3e8d0ce0af40","after":"826105d7f18bf83412f7a4b28b612f7be8a2606d","ref":"refs/heads/master","pushedAt":"2024-08-21T01:07:39.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"andrewpollock","name":"Andrew Pollock","path":"/andrewpollock","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6906046?s=80&v=4"},"commit":{"message":"build: pin remaining unpinned third-party Docker images (#2494)\n\nThis avoids uncontrolled changes to build dependencies sneaking into our\r\nDocker image builds, and is considered best practice.\r\n\r\nThe Docker Hub expresses both an \"index digest\" and a \"manifest digest\".\r\nI have used the latter, as this seemed the correct thing to do.","shortMessageHtmlLink":"build: pin remaining unpinned third-party Docker images (#2494)"}},{"before":"5de0ac28dda35a633af9cb4c34cd4d7b3248ba3d","after":"58fd10dd77a00521469d1c2ea71a3e8d0ce0af40","ref":"refs/heads/master","pushedAt":"2024-08-21T00:34:20.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hogo6002","name":"Holly Gong","path":"/hogo6002","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/39108850?s=80&v=4"},"commit":{"message":"fix: add total ordering to Maven version (#2495)\n\nMaven `Version` doesn't support `>=`, causing [version\r\nquery](https://github.com/google/osv.dev/blob/30d55798022eabb000ecc091f03ec7d5a2002c4a/gcp/api/server.py#L1250)\r\nfailures. Add the `total_ordering` function to support all kinds of\r\nordering.","shortMessageHtmlLink":"fix: add total ordering to Maven version (#2495)"}},{"before":"6ed27b1f5f23fa04a45e92a443b7b223ce16f3d6","after":"5de0ac28dda35a633af9cb4c34cd4d7b3248ba3d","ref":"refs/heads/master","pushedAt":"2024-08-21T00:15:56.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"another-rex","name":"Rex P","path":"/another-rex","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/106129829?s=80&v=4"},"commit":{"message":"chore: make function line break prettier (#2499)\n\nBrackets to the rescue! Turns out in python you can add brackets to make\r\nline breaks where-ever you want.","shortMessageHtmlLink":"chore: make function line break prettier (#2499)"}},{"before":"229871d94e5a482bc969bfcb8842809a5431e0f1","after":"6ed27b1f5f23fa04a45e92a443b7b223ce16f3d6","ref":"refs/heads/master","pushedAt":"2024-08-20T06:21:12.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"michaelkedar","name":"Michael Kedar","path":"/michaelkedar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/19356069?s=80&v=4"},"commit":{"message":"fix: give way more memory to exporter (#2498)\n\nIt's kind of concerning that it's still running out of memory on some\r\nUbuntu exports - we probably should look at *why* it's using so much.\r\n128GB should be way overkill, I just wanted to get a sense of how much\r\nit actually uses.","shortMessageHtmlLink":"fix: give way more memory to exporter (#2498)"}},{"before":"87892abde6b18b7676fc317debca25ec704395f0","after":"229871d94e5a482bc969bfcb8842809a5431e0f1","ref":"refs/heads/master","pushedAt":"2024-08-20T06:09:19.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"another-rex","name":"Rex P","path":"/another-rex","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/106129829?s=80&v=4"},"commit":{"message":"fix(api): Reduce dynamic paging time to 20 seconds (#2497)\n\n- Refactored the code to take in a cutoff time and place all the shared\r\nlogic in a context method.\r\n- Separate out batch query time limit and normal query time limit, as\r\nthey have very different behavior. The batch query can and should be\r\nlonger as it does not return all the details, the `to_response` step\r\nafter the initial query takes much less time compared to the full\r\nresponse. Batch query also takes longer in general in the querying step\r\ncompared to normal queries.\r\n- Bump up the envoy_connection_buffer_limit_bytes by 10x. I'm not sure\r\nwhat impact this will have, but currently the responses made by the\r\nubuntu query will exceed the previous limit (10mb to 100mb limit).\r\n\r\nAt 30 seconds, the current query might timeout on a fresh instance\r\n(fresh datastore connection, no JIT optimisations yet...etc.). On a warm\r\ninstance, it took 51 seconds to return a 35mb json response.\r\n\r\nThis reduces it down to 20 seconds to more reliably return.","shortMessageHtmlLink":"fix(api): Reduce dynamic paging time to 20 seconds (#2497)"}},{"before":"30d55798022eabb000ecc091f03ec7d5a2002c4a","after":"87892abde6b18b7676fc317debca25ec704395f0","ref":"refs/heads/master","pushedAt":"2024-08-20T04:53:45.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"another-rex","name":"Rex P","path":"/another-rex","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/106129829?s=80&v=4"},"commit":{"message":"feat: API Dynamic page sizing when query exceeds 30 seconds (#2496)\n\nDo dynamic page sizing for when the query starts to exceed 30 seconds. \r\n\r\nTurns out past me already thought of this, just needed to uncomment the\r\nrelevant lines.","shortMessageHtmlLink":"feat: API Dynamic page sizing when query exceeds 30 seconds (#2496)"}},{"before":"f9aab39d744a8b5884774ba92c07931947f8312a","after":"30d55798022eabb000ecc091f03ec7d5a2002c4a","ref":"refs/heads/master","pushedAt":"2024-08-20T03:32:46.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"michaelkedar","name":"Michael Kedar","path":"/michaelkedar","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/19356069?s=80&v=4"},"commit":{"message":"fix: bump exporter memory allowances (#2493)\n\nThe large number and size of records coming from Ubuntu made our\r\nexporter job start exceeding the memory limit.\r\nThrow some more memory at the problem until it goes away.","shortMessageHtmlLink":"fix: bump exporter memory allowances (#2493)"}},{"before":"c34d764cdcfe1b93cc25af1b29ecab4663e801c8","after":"f9aab39d744a8b5884774ba92c07931947f8312a","ref":"refs/heads/master","pushedAt":"2024-08-19T06:06:25.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"another-rex","name":"Rex P","path":"/another-rex","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/106129829?s=80&v=4"},"commit":{"message":"fix(workflow): Disable grpcio updating until support for new protobuf gets added to google-cloud (#2490)\n\nCurrently grpcio being updated is causing dependency resolution failure\r\nbecause grpcio and google-cloud dependencies depend on non overlapping\r\nprotobuf versions. Until google-cloud updates to protobuf v5 , we should\r\nadd this exclusion to stop renovatebot from attempting to update grpcio.","shortMessageHtmlLink":"fix(workflow): Disable grpcio updating until support for new protobuf…"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEogq7ewA","startCursor":null,"endCursor":null}},"title":"Activity · google/osv.dev"}