)]}'
{
  "log": [
    {
      "commit": "6ff6b45b266b0ef0768d5172769ba1d725b10124",
      "tree": "1150c8f1c1b2393384d0c5e2e2b0b8336230971a",
      "parents": [
        "043c0b4c1a89078eafe4c8faefa78ccbadf3a233"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu May 22 14:35:09 2025 +0200"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Wed Jun 11 19:46:15 2025 +0000"
      },
      "message": "third_party/efistub: update to use PE entry point\n\nThe old efistub used the EFI handover mechanism, which only exists for\nx86_64. Since Linux 5.8 x86_64 also supports the standard PE entry point\nwhich works the same for all supported architectures. That also has the\nbenefit of no longer needing a weird hack to switch to SysV ABI to call\ninto the kernel.\n\nChange-Id: Icd75599758e09d888a31c31f07967dfc78356fca\nReviewed-on: https://review.monogon.dev/c/monogon/+/4213\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "b21bdf9e01a4211cc0b8f91fc7beb113a9ed86c3",
      "tree": "4b5be2005cb81ca338fde86ae0706d935c67b6aa",
      "parents": [
        "d0d5d9dd04574305cf86bf1eb3e787549100ea28"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed May 28 18:37:35 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Jun 02 20:51:18 2025 +0000"
      },
      "message": "treewide: delete cloud/ except cloud/agent\n\nbmdb is no longer used in production and would be hard to maintain. The only non-stub provider is Equinix Metal, which is shutting down in 2026, and we are moving away from CockroachDB. Keep the agent, which we\u0027ll need for Monogon Cloud.\n\nChange-Id: If8b35c3ac8cdeed96a2b1814c0de7607e8acec63\nReviewed-on: https://review.monogon.dev/c/monogon/+/4235\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "36f3b6dcbcfd359b744a29cf9245c9dd6879435f",
      "tree": "ee0dcb43cd1a7c22a1fcbaa379d949bd4362b758",
      "parents": [
        "afb922cfba991a2af1473da5850b75e8db03dd56"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Tue May 20 09:05:12 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Tue May 27 07:32:21 2025 +0000"
      },
      "message": "treewide: replace stampsrcs with embed\n\nA rules_go maintainer suggested using embed instead of stampsrcs:\nhttps://github.com/bazel-contrib/rules_go/issues/3507\n\nFor Kubernetes, this means we need to patch the version libraries.\nInstead of creating a separate file for each variable, I put them all in\none file, which is parsed in an init function. This init function needs\nto run before all other init functions, which access the variables.\n\nAnother benefit of this change is that versions are stamped in all\nbinaries which include Kubernetes client libraries, not just hyperkube.\n\nChange-Id: Ib1157d3686fc35e0c4191d2fc8e165862a1973c7\nReviewed-on: https://review.monogon.dev/c/monogon/+/4208\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "56248c1c1d5039bdf3c1043ade88f3f158ceb52b",
      "tree": "ce29b41e052bc5ca6b7b1bb22acb390c09212178",
      "parents": [
        "51c6748c2158d7dbc1ec79ada63a5e68a27f8533"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Mon May 05 13:34:18 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu May 08 18:26:46 2025 +0000"
      },
      "message": "build/bazel: enable Rust aarch64 UEFI toolchain\n\nThis is required to build the abloader for aarch64.\n\nChange-Id: I25b46a8b7b1f335e5e8b589c4a868fb1412b9c9c\nReviewed-on: https://review.monogon.dev/c/monogon/+/4174\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "7c38e7845bad04db14031741e879e887e2f571b5",
      "tree": "8481308f7280a6153de818497d11f0c9614baeeb",
      "parents": [
        "dc97912eb162144d7bd92509ad8f064a8cf98ecb"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Tue Apr 29 09:23:37 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Tue Apr 29 13:11:33 2025 +0000"
      },
      "message": "treewide: replace go_binary_with_tag\n\nInstead of using go_binary_with_tag, we can write a go_binary rule which\nembeds the library. Then we can easily change all the Go configs, not\njust tags.\n\nBy default, Gazelle generates the libraries for a go_binary with private\nvisibility, so we need to override it to pulic. The go_binary_with_tag\nrule had the additional feature of combining the specified tags with the\nincoming ones (osusergo, netgo); instead I added those manually.\n\nChange-Id: I23965176f87e3a0bbd18ba5a72f190e4f9047363\nReviewed-on: https://review.monogon.dev/c/monogon/+/4157\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "9d2f3c681fee76b54dc202da6ca140151f588be8",
      "tree": "9f673387eea27eac06fbd16e9c2f3cfc689cc7fb",
      "parents": [
        "82900a743f1eebcb80c0a310563be149691b89a7"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Mon Apr 14 11:17:22 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Tue Apr 29 06:55:58 2025 +0000"
      },
      "message": "m/test/localregistry: use osbase/oci/registry\n\nThis replaces the localregistry implementation with a small wrapper\naround the new registry package.\n\nThe images attribute of the Bazel rule was changed from a list to a\ndict, which makes the repository and tag independent from the file path.\n\nChange-Id: I1f6213dd67f7bdcf2373fe136958caa68b9f4d10\nReviewed-on: https://review.monogon.dev/c/monogon/+/4089\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "b48174d1865861e5992136415b1e86d3cac4e7fd",
      "tree": "f74a6e47d0b870db70ee11e930341b1d33add7da",
      "parents": [
        "27da2e6feeaee5acaf47ccca3efceb534755628b"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Mon Apr 14 10:13:02 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Tue Apr 29 06:55:58 2025 +0000"
      },
      "message": "osbase/oci: add package\n\nThis adds the oci package, which contains types and tools for working\nwith OCI images.\n\nChange-Id: Ie2a1d82c7ac007f5d1ad47666880dbf8a8bd931d\nReviewed-on: https://review.monogon.dev/c/monogon/+/4085\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "db0852264ed945b57320a43665069eee766c8ca8",
      "tree": "a3fd95d3526573ece244d2814114d2bb9e372cce",
      "parents": [
        "08054caeaa6bd5a7008357b628073118da4dc865"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Apr 28 20:58:18 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Apr 29 00:13:59 2025 +0000"
      },
      "message": "build/github_repository: allow storing submodule_info as attr\n\nCurrently we are doing too many requests to the REST API as our CI is\ninvalidating the cache too often. This is a workaround until we can\nstore said data inside MODUEL.bazel.lock.\n\nChange-Id: Iac9be2a4ed3d3fb5f301ac63545d07d807cc2f8e\nReviewed-on: https://review.monogon.dev/c/monogon/+/4156\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "2368dc7f001e4762b77de92cdf95da5553bb1105",
      "tree": "29600c666b4e296eba3c886c14528aa1e21e1853",
      "parents": [
        "4c7bb3771714b9f7c136195bca510fda258ebb05"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Wed Mar 26 09:19:10 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Wed Mar 26 13:45:05 2025 +0000"
      },
      "message": "go.mod: update nftables and drop patches\n\nI have upstreamed these patches.\n\nChange-Id: I27abbea4fa3ce25450f2e14a7247ddc9eeff676a\nReviewed-on: https://review.monogon.dev/c/monogon/+/4041\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "a0684409400aa22f39b44a125dc07729e98c4908",
      "tree": "f1891aad87d36ac36a93087ff66f8cd753b9f56d",
      "parents": [
        "17ad63fa0b09d3dfe461ac237cd5db5eaeefc2ed"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 25 11:32:40 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Mar 04 15:54:37 2025 +0000"
      },
      "message": "treewide: bump go deps and cleanup nogo linter config\n\nThis includes a patch for rules_go that is not merged yet, that allows\nto run nogo against all external dependencies.\n\nChange-Id: Ie874278d01e94116a2c3898bc98084c961318fd9\nReviewed-on: https://review.monogon.dev/c/monogon/+/3983\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "17ad63fa0b09d3dfe461ac237cd5db5eaeefc2ed",
      "tree": "aa133f4b89c91044047c902dad5b752696098b14",
      "parents": [
        "12e4b549f88c91e5eccb2abe1631793c879a66c6"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu Feb 27 14:43:56 2025 +0100"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu Feb 27 17:33:51 2025 +0000"
      },
      "message": "m/n/kubernetes/networkpolicy: add Cyclonus test suite\n\nThis adds a test for the network policy controller, based on the\nCyclonus test suite. Running Cyclonus on a real cluster takes multiple\nhours, as there are over 200 test cases, each of which takes around 1\nminute. The test implemented here uses a fake Kubernetes API and pods,\nwhich allows running all tests in around 15 seconds.\n\nIPv6 is partially implemented but disabled. The tests pass, but each\ntest takes around 2 seconds, because some ICMPv6 replies for blocked TCP\nconnections seem to get lost somewhere and are only processed when the\nTCP SYN is resent one second later.\n\nChange-Id: Id77f2dd4d884b6d156e238e07e88c222e3bbe9a2\nReviewed-on: https://review.monogon.dev/c/monogon/+/3905\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "ec03df42d643603d0a8d92b0db1cc4a4a865651e",
      "tree": "cc8292ee06d10ff186ef26e8b36730cb14a500e0",
      "parents": [
        "6e2839e982bf86f7a7a9b14f10d6d3c39c070fa0"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu Feb 27 14:30:45 2025 +0100"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu Feb 27 15:16:44 2025 +0000"
      },
      "message": "treewide: update nftables to 0.3 with patches\n\nThis update nftables to 0.3. The bigger-buffer patch is no longer\nneeded, because it turns out that it is possible to increase the buffer\nsize using nftables.WithSockOptions, which k8s-nft-npc now does. I added\ntwo new patches which implement features which we need for k8s-nft-npc.\nI made upstream PRs for these which are still pending review.\n\nChange-Id: Iefbf850147a4c6dfd110e356fb43e822f436e843\nReviewed-on: https://review.monogon.dev/c/monogon/+/3994\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "ffd8c7bb37da9b72eb66a0555e319ca2290ea761",
      "tree": "fe656d2063543dc01aadcd4ef175652b48a925d3",
      "parents": [
        "12cab56e96b6591f4756bdca96e26260431fbcda"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Feb 24 22:02:01 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Feb 27 07:43:12 2025 +0000"
      },
      "message": "build/bazel: bump edk2 to stable202502\n\nCloses monogon-dev/monogon#313\n\nChange-Id: I99189a0aabae21b7647e78e1cae4f094298611dc\nReviewed-on: https://review.monogon.dev/c/monogon/+/3967\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "d842aaf9b5b45c6a0851542e8c9d21032f99a249",
      "tree": "1aab5f477d1019cf62e1f69b160afc3d639e2722",
      "parents": [
        "44c31a087929a16e93700d7d92fcff1bd066b8c0"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Mon Feb 17 17:39:46 2025 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Feb 25 16:04:05 2025 +0000"
      },
      "message": "workspace: update linux to 6.12.15\n\nSwitch to the current 6.12 LTS branch and rebase the patches.\nAlso switch to using savedefconfig for config instead of just including\nthe entire thing. This makes it much more readable as it only contains\nsettings we\u0027ve touched.\n\nChange-Id: I2b15944f0083399290a2539c42e37205e839bf36\nReviewed-on: https://review.monogon.dev/c/monogon/+/3908\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "515f1f3cb911f9afe31867ef9a5f4a976ce6d85b",
      "tree": "f76498cb3a4cbe971a2debd3b64efd2600c0d033",
      "parents": [
        "0edf66c5e42b4cff2a1a95316c1737ac7a0be7f9"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Feb 24 18:51:31 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 25 14:23:22 2025 +0000"
      },
      "message": "treewide: bump go to 1.24.0\n\nChange-Id: I1638653ac419205fcaaad99bc54c7ff52e94f930\nReviewed-on: https://review.monogon.dev/c/monogon/+/3961\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "74a233165b0cbf299aa9d9d38310e327f4ba8759",
      "tree": "842c3f8a20c04d335dc7a9437012ebd647fb1d29",
      "parents": [
        "30553e846b16792852340975d75191ef104cdd9b"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Feb 10 23:12:24 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 11 18:28:55 2025 +0000"
      },
      "message": "build/bazel: set supported_platform_triples for crate_universe\n\nThe default setting contains way too many targets which are getting spliced together. By overriding them to our actual triples, we can reduce the analyze time by over 30s.\n\nChange-Id: I8b4d4066fcdaf299f55921cc0390256f416372c9\nReviewed-on: https://review.monogon.dev/c/monogon/+/3848\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "52700ae56c5d541e711fbd5f27373b3dc200f8dc",
      "tree": "ed5e75883fc44d14f7824b0a5ed40a6ab650923e",
      "parents": [
        "e8beaed8dcde2c198e91addb0baa884079363581"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Jan 28 15:07:08 2025 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Feb 11 15:05:46 2025 +0000"
      },
      "message": "m/n/k8s: add nftables network policy controller\n\nThis integrates my K8s network policy controller. In its current form it\ndoes not have many guarantees as the custom CNI plugin is not yet in\nthere but it mostly works. Also there is still a DNS hole as host-local\nservices are not properly policed yet.\n\nIt has a basic smoke test using the connectivity testing helper as well\nas some metrics to make sure it is integrated properly and to be able to\nmonitor its performance.\n\nChange-Id: Ia2f54b9975361270678ce742ae5e32df25e515c5\nReviewed-on: https://review.monogon.dev/c/monogon/+/3740\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "6948d336e97fc71734013fc5c219671e3bea7965",
      "tree": "1a9e4043d8ff5ad13b330eebcba7ab9058c0e875",
      "parents": [
        "f5c45106f379abbbbf0b43ce2eadbec26fa97308"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Feb 10 19:55:48 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Feb 10 22:41:06 2025 +0000"
      },
      "message": "build/bazel/third_party: replace git_repositories with http_archive\n\nRemove the rest of the git_repositories with http_archive fetches\n\nChange-Id: Ie9fb5f93b4eb333fc26ce52e2d062cacf8177eb4\nReviewed-on: https://review.monogon.dev/c/monogon/+/3843\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "f5c45106f379abbbbf0b43ce2eadbec26fa97308",
      "tree": "93c0cd87f7f4d31cfd1dc101f381fff910ff8ef7",
      "parents": [
        "6e62de0fc553f35cb861ddb59c5788d12b9d83a6"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Sat Feb 08 22:30:58 2025 +0000"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Feb 10 22:41:06 2025 +0000"
      },
      "message": "build/github_repository: add repository rule for github\n\nThis adds a repository rule for fetching github repos as their archive including submodules.\n\nCloses monogon-dev/monogon#183\n\nChange-Id: I0f712f3aa31d6cf6f0e3f7693d2e667a5293a589\nReviewed-on: https://review.monogon.dev/c/monogon/+/3841\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "c359d550ca8bf59acc77dd9aefc5b09572a7e399",
      "tree": "ddc9dbbfbae97722d458016e17949c9e086d1fe2",
      "parents": [
        "71718ba65586af1e5a42f1abdf2d734c90720105"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Jan 28 14:22:23 2025 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Fri Feb 07 12:44:51 2025 +0000"
      },
      "message": "gomod: update delve\n\nOur Delve is far too old for the current Go version, update it to\nlatest.\n\nChange-Id: Ib7302bafe117e3a2cbc1673e7570423f7303a935\nReviewed-on: https://review.monogon.dev/c/monogon/+/3815\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "71718ba65586af1e5a42f1abdf2d734c90720105",
      "tree": "695dc7f65f3d5495c5dd53019b334513a3978164",
      "parents": [
        "6d33a4342a16200d628f30ff91b169927fc2867a"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Fri Feb 07 00:04:28 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Feb 06 23:25:13 2025 +0000"
      },
      "message": "third_party: fixup missed go patches\n\nDue to submission ordering some patches were left in the old place but\nthe BUILD file was removed, breaking main. Fix this by also moving them.\n\nChange-Id: I6bc22a303e71504045faaba998dbd7eba82cc38e\nReviewed-on: https://review.monogon.dev/c/monogon/+/3832\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "7887f758de8f9106a484ca59d9734304aa919e36",
      "tree": "f3e85143bc4b4a064e44534327a1f656c83b6340",
      "parents": [
        "e6cc22700801d284386fdf7345dd85f7e522a6cb"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 04 03:06:56 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Feb 06 16:46:49 2025 +0000"
      },
      "message": "third_party: move go patches into their own folder\n\nChange-Id: I7e2f2790e233aaf13cfd6ed2ffcf5544461a4f39\nReviewed-on: https://review.monogon.dev/c/monogon/+/3822\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "7c0bd0b18e0c857a8af930607b61bde0b68fb55f",
      "tree": "2350c0bf5507ad94ac241c10f48c22487cf20595",
      "parents": [
        "e4895292e2627e4047c833e1808e614bba3c4783"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Fri Jan 10 04:15:37 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Feb 06 14:04:05 2025 +0000"
      },
      "message": "treewide: add gofmt linter\n\nChange-Id: Ic0d8450b46790c4dc797b117634227be9a48de01\nReviewed-on: https://review.monogon.dev/c/monogon/+/3827\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "e4895292e2627e4047c833e1808e614bba3c4783",
      "tree": "0bd7f4de0419c7273e5da32e43adaac75ae059cb",
      "parents": [
        "f525fa74802d2ea61577b188476bea2d54f816d7"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 04 03:10:39 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Feb 05 17:30:48 2025 +0000"
      },
      "message": "third_party: rename build_files to $reponame.bzl\n\nThis enables IDEs to correctly identify the filetype\n\nChange-Id: I9e2644514f001f94abe7da92c332f95889a34380\nReviewed-on: https://review.monogon.dev/c/monogon/+/3823\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "0dca6c91ea9b8a14278aeb3a1a8ba6b512479862",
      "tree": "d3a4605fa9cefa9dccc79fe3df71d1e4335381a8",
      "parents": [
        "b6ed72eabf092066a837fea4b68846376bd70e8a"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Jan 28 15:04:13 2025 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Wed Feb 05 14:55:23 2025 +0000"
      },
      "message": "metropolis: use interface groups\n\nThis adds interface groups to all K8s pod interfaces via a CNI plugin\npatch and corresponding configuration. It also adds an interface group\nto the clusternet interface. Using these new interface groups the\nnftables rules for NAT can be simplified.\n\nThese will also be used by the network policy plugin later.\n\nChange-Id: I4638a4349ccb12b8724ad28ae34bb61cac4b4ece\nReviewed-on: https://review.monogon.dev/c/monogon/+/3814\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "ed9a583f96bc6aa19478f76251fb3c1212eaef87",
      "tree": "8585cd84bb2ddf4f01716073a0e7e88dfa46437f",
      "parents": [
        "cebd10b61a82b34298f558f68e701c764289b365"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 04 03:02:45 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Feb 05 13:44:40 2025 +0000"
      },
      "message": "treewide: remove repo_name override for gazelle\n\nWe don\u0027t need it, let\u0027s get rid of it\n\nChange-Id: Ic0d48e21b95bd2fa81024f2b71ae96cbe21cd9d2\nReviewed-on: https://review.monogon.dev/c/monogon/+/3821\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "95190cee890a0badf71822838959b24a073733d1",
      "tree": "78cef7051fe668d5a80330376f7f545096ff1e31",
      "parents": [
        "3c19522f224526e8418bd606f63a037a4bdc9466"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Jan 28 13:07:00 2025 +0000"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Feb 04 12:40:59 2025 +0000"
      },
      "message": "third_party/k8s: fix custom dialer in websocket transport\n\nSee patch commit message for main content.\nNeeded for our connectivity testing framework.\n\nChange-Id: I991cd03ae07ac11c3861f29086400ddd993ccc05\nReviewed-on: https://review.monogon.dev/c/monogon/+/3812\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "15c46ccb52bc2544d35eee9a80b3c2fb5c0756e2",
      "tree": "18a130c2eaf3c52b135e9278520b6fca35ddc710",
      "parents": [
        "f92158ec7c4b6e48134c2a2e0c0ca86ecebfa322"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Jan 16 17:41:42 2025 +0000"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Jan 16 18:11:01 2025 +0000"
      },
      "message": "workspace: update cacerts\n\nRemoved:\nSecureSign RootCA11\nEntrust Root Certification Authority - G4\nSecurity Communication RootCA3\n\nAdded:\nGLOBALTRUST 2020\nTWCA CYBER Root CA\nSecureSign Root CA12\nSecureSign Root CA14\nSecureSign Root CA15\n\nChange-Id: Ief327dba2eaf243ae94b9b0ee69a17da4e4688eb\nReviewed-on: https://review.monogon.dev/c/monogon/+/3786\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "f92158ec7c4b6e48134c2a2e0c0ca86ecebfa322",
      "tree": "4afabfba93b77283e85678170d907bf26d3b4a45",
      "parents": [
        "5b83c5278b9ecd4f04e75ac0ddb7fcb0cfb0f20a"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Jan 16 17:33:51 2025 +0000"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Jan 16 18:11:01 2025 +0000"
      },
      "message": "WORKSPACE: update linux to 6.6.71\n\nStable release bump, no significant changes expected.\nNo relevant regressions on the linux-regressions list observed.\n\nChange-Id: I382ef8f5db4fe912c693f542fadf8daa9f6702cd\nReviewed-on: https://review.monogon.dev/c/monogon/+/3785\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "5c52062f02eb3b32b39ed4ccb9aa6e70c7e1af0d",
      "tree": "ac43dda542ea4724382d7d34c40d8024ff937191",
      "parents": [
        "896b1388fb26096ccaf60ff99ac8da2a9b07dab3"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Jan 14 14:14:52 2025 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Jan 16 12:38:32 2025 +0000"
      },
      "message": "third_party/k8s: backport data race fix\n\nThe metrics component of K8s had a very questionable WithContext\nimplementation which set the context into the metric, not the returned\nhandle. This causes incorrect metrics as well as data races. Backport\nthe fix from upstream.\n\nChange-Id: I4f8ce9d194ba9e7b3420007863286ad9f5b612b6\nReviewed-on: https://review.monogon.dev/c/monogon/+/3780\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "25e0d8f5bdcae3b03b1bc43cad49b4ed0b4e567e",
      "tree": "d82d60b706433dafabc494619032e35044aa3151",
      "parents": [
        "bdd0d25cda74c662cef174c032057cb2aba29e8a"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Dec 02 23:46:24 2024 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jan 14 16:15:53 2025 +0000"
      },
      "message": "treewide: remove usage of global tags between build configs\n\nChange-Id: Ie7c4714d30f8c3342a97451d58e14cfb43087586\nReviewed-on: https://review.monogon.dev/c/monogon/+/3776\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "bdd0d25cda74c662cef174c032057cb2aba29e8a",
      "tree": "686f5a06fd23332710835d94d925b3e63bab539b",
      "parents": [
        "156248b949f3da7c8d0f4f46cb97ac7606464952"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Jan 09 22:31:08 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jan 14 12:07:21 2025 +0000"
      },
      "message": "build/bindata: delete unused tooling\n\nChange-Id: I4febbc6b5a8bf8dc9aa6aa1c56e5ae70214974ef\nReviewed-on: https://review.monogon.dev/c/monogon/+/3773\nTested-by: Jenkins CI\nReviewed-by: Hendrik Hofstadt \u003chendrik@monogon.tech\u003e\n"
    },
    {
      "commit": "227c5cbbdd8f682b6e4d4cc661fa0d6e734206f2",
      "tree": "46f0f2d12a36cbeb477d54a57d50a11d62277c5c",
      "parents": [
        "3a171d123fff540c8c9d646152a5d5ed9ef873de"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Jan 09 21:39:55 2025 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Jan 09 22:13:01 2025 +0000"
      },
      "message": "osbase/net/dump: correct address prefixes if not on-link\n\nCurrently if an interface address has an on-link prefix (i.e. is not a\n/32 or /128) this gets automatically added as a route. Certain\nin-the-wild configs have these but also a route with a gateway, making\nthe prefix not on-link. Fix the interface addresses in these cases to a\nsingle IP to avoid the spurious on-link route.\n\nChange-Id: If601c61cbbab7f05e72c7f4908071def2dcdb44b\nReviewed-on: https://review.monogon.dev/c/monogon/+/3771\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "11bf3d33b1ebbaea218fe0a4198c1f2da6a74d71",
      "tree": "3bfc9046c49c9c133490f593b0281513d004f1ca",
      "parents": [
        "153c9c1d69e5c37dd96f8d43ff1e628bd548320e"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Jan 07 17:49:27 2025 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Wed Jan 08 00:01:30 2025 +0000"
      },
      "message": "treewide: update nftables to 0.2 with patches\n\nThis updates nftables to 0.2 and adapts nfproxy to the changes.\nIt also includes two patches which will be needed by the k8s-nft-npc\nimplementation later. The first one increases buffer sizes to allow\nlarger transactions (the buffer size is sadly not configurable). The\nsecond one introduces a special expr implementation which allows for\nexpressions whose value depends on the address family.\n\nBoth patches should eventually go upstream but are not fully suitable\nfor upstreaming in their current form.\n\nChange-Id: Ib398a14fa3fb7b6f808a834406d5307cea1fe8ae\nReviewed-on: https://review.monogon.dev/c/monogon/+/3751\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "153c9c1d69e5c37dd96f8d43ff1e628bd548320e",
      "tree": "dc8b3d767ad46645cf2b0c3425f5a2f1e65cfcb5",
      "parents": [
        "8e19fa4edcb992d8c486b420debb6d63f8777d97"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Jan 07 17:44:45 2025 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Wed Jan 08 00:01:30 2025 +0000"
      },
      "message": "treewide: unfork netlink\n\nWe were using our own fork because of the psample change whose\nupstreaming effort has stalled since Mateusz left the company. That\nnetlink base is now getting too old and we have more patches on top\nwhich all have since become irrelevant or got upstreamed.\n\nThe new version of netlink also no longer has the quirk that default\nroutes do not have a destination set, fix that in the DHCP tests and use\ngo-cmp as the raw binary values are annoying to get right and do not\nmatter. Semantic equivalence is what we\u0027re after.\n\nThus stop using our fork and instead pick up the rebased psample patches\nfrom the new upstreaming effort. This removes one more replace directive\nwhich is nice.\n\nChange-Id: I21a59c2c9a99dd3baf672a8aa2ad9332e573cba1\nReviewed-on: https://review.monogon.dev/c/monogon/+/3750\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "5178dd76472906d541fe08c643633499708c67de",
      "tree": "c8ca42dc5fe77d78cca49cb002eeed67de06e743",
      "parents": [
        "f724ed2be1d3f86159ea83ca41f5f6b0886a69a5"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Dec 04 04:38:45 2024 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jan 07 15:59:01 2025 +0000"
      },
      "message": "workspace: introduce bazel downloader config and replace bazeldnf mirror\n\nThis rather small change does rework the way we cache our dependencies\nby instructing bazel to fetch everything through a custom proxy. See\n//build/mirror_proxy:README.me for more infos.\n\nCloses monogon-dev/monogon#178\n\nChange-Id: Ic671fc8233a1cbf37427bbc96339ea8108310e21\nReviewed-on: https://review.monogon.dev/c/monogon/+/3686\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "475cbb1e8f9fc90936a04ff11bcb4b794b5adcec",
      "tree": "76f0216106df475b63ec31f30bb715e5cd0563c4",
      "parents": [
        "1195734e94f3842db7f9044d581d88494a8440db"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jan 07 00:38:16 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jan 07 15:10:08 2025 +0000"
      },
      "message": "treewide: replace build/proto_docs with rules_proto_grpc_doc\n\nIn a future commit we will use other modules from rules_proto_grpc,\nwhich allows us to remove this custom rule\n\nChange-Id: I00a823de8fb8eb1e3beb5bf2f516d2c92dabc5a0\nReviewed-on: https://review.monogon.dev/c/monogon/+/3746\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "ccabae947fe90a36055e7a16f42c030a1c89f1ac",
      "tree": "6d292c851b180fbe1aa2ac27cbf788992e0f7e15",
      "parents": [
        "35cd44be9b5f43d19e05f48f6be2ab6cd65b9c22"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Dec 17 22:25:33 2024 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Jan 06 15:36:47 2025 +0000"
      },
      "message": "build/bazel: update chrony source url\n\nThe old one is not reachable anymore\n\nChange-Id: I166238408f3f330f87971af5c1f06e7a259ae89d\nReviewed-on: https://review.monogon.dev/c/monogon/+/3741\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "837cb8e459b9eefabe89ab17df0b7dafb5e3d631",
      "tree": "32337d84d4f32b0c2c523e2c5bd177f4acfe4808",
      "parents": [
        "b6afed68fd1d2ee9b32d395b388d2db1338d0fa0"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Mon Dec 23 13:52:56 2024 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Mon Dec 23 21:59:59 2024 +0000"
      },
      "message": "treewide: update Kubernetes to 1.32\n\nRelatively easy change, one cadvisor fix is temporarily needed. The\nlegacy log dir patch needed to be rebased, that\u0027s about it.\n\nI enabled single-process OOM killing again as that was the default for\ncgroupv1 and IMO the more sane behavior.\n\nUpstrem changelog at:\nhttps://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md\n\nChange-Id: I537a6e37137d05efb6eec8635915e36fd8b37cbc\nReviewed-on: https://review.monogon.dev/c/monogon/+/3721\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "0ec0c53061acd57cf545440a723c1fd9817ed080",
      "tree": "ac07fa1b10948234fe1add7300508a427c058325",
      "parents": [
        "652c2ad2e499ca709523978e04b3a3dbb6df642c"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Aug 29 12:39:47 2024 +0000"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Wed Nov 20 18:40:12 2024 +0000"
      },
      "message": "m/n/k/containerd: upgrade to v2\n\nUpgrade containerd to 2.0, migrate config and adjust all paths.\nNo new K8s features are enabled yet, this will come separately.\n\nAlso bumps gVisor to the latest version and essentially reimplements the\nshim as the API has changed a lot.\n\nA drive-by fix in clitable was necessary as the x/tools upgrade\nintroduced a new analysis pass.\n\nChange-Id: I9d25af203b94667aaac69a71eeccad2d42aa5f99\nReviewed-on: https://review.monogon.dev/c/monogon/+/3622\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "795951910e1c6f66efecf40e4dcc909d143999fc",
      "tree": "c6b16e84340b390da57b3628f6d5ef1b71ac89c1",
      "parents": [
        "d589b6afab60a4cfc5723c04ae83183a4487ec7e"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Mon Nov 11 14:55:56 2024 +0100"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Tue Nov 12 16:14:55 2024 +0000"
      },
      "message": "osbase/fat32: write file creation time\n\nAdd file creation times to directory entries. This was already partially\nimplemented, and there even was a test. But the test was conditional on\nthe kernel version, and the version comparison was broken. The test\ntimestamps were also wrong, as the last component of time.Date is\nnanoseconds, not milliseconds.\n\nChange-Id: Ic00d6bb27aced918df018c9ff3148d12ecb07753\nReviewed-on: https://review.monogon.dev/c/monogon/+/3608\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "5d1bf6ab597d1ebfc4284bcb7df6648c17535464",
      "tree": "1f57a604f9f3e9420e8d7bde27d8ae5fed31ea98",
      "parents": [
        "275facf8c7a5f3dc826e27e75a6122226acd5694"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Tue Nov 12 13:34:40 2024 +0100"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Tue Nov 12 13:14:50 2024 +0000"
      },
      "message": "build/ci: add bazel mod tidy step\n\nRunning `bazel mod tidy` on the current main branch causes a change in\nbuild/bazel/rust.MODULE.bazel. If `bazel run //:go -- mod tidy` changes\ngo.mod, it will also also run `bazel mod tidy`, which means that this\nwill eventually be noticed in a later unrelated change. But it is better\nif this is noticed and fixed immediately, so I added `bazel mod tidy` to\nthe steps run by CI. It looks like we then don\u0027t need `bazel mod deps`\nanymore.\n\nI also moved the git status step to the post always block, such that it\nis run even if one of the previous steps fails. For example,\n`bazel run //:gazelle -- update` can fail if a change to\nMODULE.bazel.lock is necessary. This should make it easier to understand\nwhy the pipeline failed, because you can then still see which files have\nchanged, and the \"Unclean working directory\" message is printed.\nI tested that this works, and that the pipeline still fails if a step\nin the always block fails.\n\nChange-Id: I05e3f1a5d9e45ba16058cc6758b0acb106458cae\nReviewed-on: https://review.monogon.dev/c/monogon/+/3609\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "9eab31ccbba4a2db416e4c5c387d22ec672ea92f",
      "tree": "92b81e90fdb13d29a12dc4ef1a253e40eddd10ff",
      "parents": [
        "272c8301e0db375689dbc5bee6134b91cc23188d"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Oct 23 12:33:36 2024 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Nov 06 16:47:06 2024 +0000"
      },
      "message": "treewide: bump rust to 1.82.0\n\nThis also patches rules_rust to support extra_rustc_flags inside bzlmod\nextensions.\n\nChange-Id: I5da146bee580128a7ecfa6d98fa3afe482deb112\nReviewed-on: https://review.monogon.dev/c/monogon/+/3599\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "492434add0746eef043e5e5acc106035ccec4358",
      "tree": "8a6cb3b702b55e69f7e78f57a6ece0196bdf6567",
      "parents": [
        "1f51cf42fcd4d7bb7f4b103c797c438bfa7b0098"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Oct 22 14:29:55 2024 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Oct 31 14:09:37 2024 +0000"
      },
      "message": "treewide: remove qemu build\n\nWe aren\u0027t bundling it right now and it is fairly out of date. Let\u0027s kick\nit out until we need it, then reengineer the build.\n\nChange-Id: I5362616922d4b9d3e971868636f3792e33880f7a\nReviewed-on: https://review.monogon.dev/c/monogon/+/3568\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "677de978403a58cd219e77b312b647927bd560ac",
      "tree": "68c55ccd2b6680d8016cf066cb1f13feb2b60113",
      "parents": [
        "5d0f63442a3ec8998d7ed9eb3a3b04ad127a88db"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Sep 25 05:30:04 2024 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Oct 16 12:09:54 2024 +0000"
      },
      "message": "treewide: bump go to 1.23.1\n\nAlso removing two checks which are useless for us as they validate usage\nof cockroach internal type usage.\n\nChange-Id: Ia0f920baa4dfd3068e6669f1ca5363f227ce67de\nReviewed-on: https://review.monogon.dev/c/monogon/+/3452\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "5d0f63442a3ec8998d7ed9eb3a3b04ad127a88db",
      "tree": "f1b1f37cefe775c27cb7c3c8cfddb9d1e3697914",
      "parents": [
        "8eebee7e32f60095137dab785a3cc3f97c85d03d"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Sep 25 03:35:00 2024 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Oct 16 12:09:54 2024 +0000"
      },
      "message": "treewide: bump bazel dependencies\n\nChange-Id: Iee54b3e74e914120ab8d644382afe40a3647ef4b\nReviewed-on: https://review.monogon.dev/c/monogon/+/3451\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n"
    },
    {
      "commit": "0bc92a087ee0eb279ab29c3aba5d127b4202a2ea",
      "tree": "9c481ad86d6324cdd6bdfff4a55af4d4b4689f3c",
      "parents": [
        "61b97a375aee98f58c13c13be672b442aecc8440"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Oct 01 22:53:08 2024 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Oct 10 15:55:35 2024 +0000"
      },
      "message": "treewide: bump rules_oci to v2.0.0\n\nChange-Id: Idbeb3a3b7645c5b6f774eb43d218ca0bc79dccc1\nReviewed-on: https://review.monogon.dev/c/monogon/+/3474\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "a512b0e03b370ea86b383212863d81b6d9677f3a",
      "tree": "373bb9ff7fd8e63928205c28d8480c33bfd8f2aa",
      "parents": [
        "5fb8a3fc41a1c59636adaf55c6495c1a671ef7ad"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Sat Sep 28 03:57:43 2024 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Oct 08 13:55:15 2024 +0000"
      },
      "message": "metropolis/vm: delete vm package\n\nThis only contains the CRD right now and is not used/implemented\nanywhere. This is also the only usage of kube-code-gen which breaks with\nthe newest version of rules_go. Since we don\u0027t plan to use this\nin the near future this also gets deleted, because even if we need it\nagain, we can just revert this change.\n\nChange-Id: I29ab75541957fce6a7dd8414c0df3cfdf90f8ec3\nReviewed-on: https://review.monogon.dev/c/monogon/+/3465\nTested-by: Jenkins CI\nReviewed-by: Serge Bazanski \u003cserge@monogon.tech\u003e\n"
    },
    {
      "commit": "e551d31d39e7cf13e7adf2f66941e6989a708c60",
      "tree": "ac04077adea875cf28f8c52f427c72c780b383ae",
      "parents": [
        "5f1a7de2dfb5db1884fcb677a0bd38daf6dd3c97"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Tue Sep 17 12:38:54 2024 +0200"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu Sep 19 15:59:14 2024 +0000"
      },
      "message": "third_party/go: patch etcd to fix panic in IsLocalMemberLearner\n\nAfter removing etcd membership from a node, etcd panics in\nIsLocalMemberLearner. Because we currently run etcd embedded in the core\nprocess, this causes the entire machine to reboot.\n\nThe panic happens in the Status RPC handler, which we call to obtain the\ncurrent etcd leader. Stack trace:\n\ngo.etcd.io/etcd/server/v3/etcdserver/api/membership.(*RaftCluster).IsLocalMemberLearner(0xc000879380)\n\texternal/gazelle~~go_deps~io_etcd_go_etcd_server_v3/etcdserver/api/membership/cluster.go:859 +0x26d\ngo.etcd.io/etcd/server/v3/etcdserver.(*EtcdServer).IsLearner(0xc001020c18?)\n\texternal/gazelle~~go_deps~io_etcd_go_etcd_server_v3/etcdserver/server.go:2813 +0x1a\ngo.etcd.io/etcd/server/v3/etcdserver/api/v3rpc.(*maintenanceServer).Status(0xc001020bb0, {0xc001d38638?, 0xc001d38638?}, 0xc001d38690?)\n\texternal/gazelle~~go_deps~io_etcd_go_etcd_server_v3/etcdserver/api/v3rpc/maintenance.go:228 +0x137\ngo.etcd.io/etcd/server/v3/etcdserver/api/v3rpc.(*authMaintenanceServer).Status(0x4a5c340?, {0x3122cf8?, 0xc0026f2f00?}, 0x2d0ebd8?)\n\texternal/gazelle~~go_deps~io_etcd_go_etcd_server_v3/etcdserver/api/v3rpc/maintenance.go:306 +0x25\n\nA node that is no longer a member is also not a learner anymore, so just\nreturn false instead of panicking.\n\nChange-Id: I6fa3d710836852772d5c2bf05dbd63a3d68b1a8b\nReviewed-on: https://review.monogon.dev/c/monogon/+/3436\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "7a1b27df41a9729dd9669cdaabd6864afc5e85b7",
      "tree": "fe32eee491bd556f3379ac2fba779d56314f045c",
      "parents": [
        "d0e39cbad2e12cbb23caa7d36ccbd4821285ac51"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Feb 22 23:54:58 2024 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Wed Sep 18 19:39:51 2024 +0000"
      },
      "message": "metropolis/cli/metroctl: implement install ssh\n\nThis implements another way of installing metropolis via ssh. It does\nthis by uploading the files to the target machine and then doing a kexec\ninto the install environment. If it fails at any point it will print the\nerror and reboot.\n\nChange-Id: I1ac6538896709c386b053a84903fa04940c1f012\nReviewed-on: https://review.monogon.dev/c/monogon/+/2079\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "c7a332be2ac37af8d3e27029e6300c8884988ab5",
      "tree": "dc834fee3e970b047b65e329d8f278cd5a91eeca",
      "parents": [
        "3c5d0635f855f16780792a6be311f71b4d59f20b"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Sep 12 17:58:42 2024 +0200"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Mon Sep 16 15:13:57 2024 +0000"
      },
      "message": "third_party/linux: disable fallback tunnel devs\n\nIntroduces a patch for a kernel config option to control the default\nbehavior for fallback tunnel devices in the kernel.\nWe want to fully disable them but this can otherwise only be done by\npassing kernel commandline arguments which would need to be specified in\na lot of places and can easily be missed.\n\nThis will get rid of things like the sit0 interface in the host and\ncontainer namespaces.\n\nChange-Id: I2c03c5aa50bc64b527b72c3c022d3e9f2111dd84\nReviewed-on: https://review.monogon.dev/c/monogon/+/3430\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "c752ec63559ecd9b486cc9df2cdb37366ceda427",
      "tree": "a6d0e7ee37fbc883d05e43a0fac41f419ea3238b",
      "parents": [
        "2545895a68d016eb71436e8b8ddd7e14e1861e99"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Wed Sep 11 16:36:43 2024 +0000"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Wed Sep 11 17:13:41 2024 +0000"
      },
      "message": "WORKSPACE: update intel_ucode to 20240910\n\nFixes a bunch of security issues and gets us to the latest version\nagain.\n\nChange-Id: I5d6f3a4a6e1bbdd4d768479d6f5c7e37c243c9d5\nReviewed-on: https://review.monogon.dev/c/monogon/+/3407\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "2545895a68d016eb71436e8b8ddd7e14e1861e99",
      "tree": "e2a14cdcdbb7802884d54c10b43d18a9eb73df66",
      "parents": [
        "8448d70a1aaff763727cd22e329a5c6dae30ba62"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Wed Sep 11 16:35:28 2024 +0000"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Wed Sep 11 17:09:42 2024 +0000"
      },
      "message": "WORKSPACE: update linux-firmware to 20240909\n\nUpdates AMD microcode for families 17h and 19h and adds RTL8126A\nrevision B firmware.\n\nChange-Id: If42bae6c871d9776030006e4433d5a563c0426b1\nReviewed-on: https://review.monogon.dev/c/monogon/+/3406\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "8448d70a1aaff763727cd22e329a5c6dae30ba62",
      "tree": "efbf7561c31182a310b39063bb7d5c51ce10b259",
      "parents": [
        "cc32cc4945e51da605a961022440f5456455ce30"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Wed Sep 11 16:31:12 2024 +0000"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Wed Sep 11 17:06:04 2024 +0000"
      },
      "message": "WORKSPACE: update linux to 6.6.50\n\nStable release bump, no significant changes expected.\nNo relevant regressions on the linux-regressions list observed.\n\nChange-Id: I5a102a9f8c182cad05b361058627def1031c6f19\nReviewed-on: https://review.monogon.dev/c/monogon/+/3405\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "0d9e125d30455e7d4352e1394fead5b093846621",
      "tree": "e69047b94bba04e16d4cbfa89a4c7ffd30a3a176",
      "parents": [
        "5abcc7a8a8eb891c0f8920fbd4fa0104e751841b"
      ],
      "author": {
        "name": "Serge Bazanski",
        "email": "serge@monogon.tech",
        "time": "Tue Sep 03 12:16:47 2024 +0200"
      },
      "committer": {
        "name": "Serge Bazanski",
        "email": "serge@monogon.tech",
        "time": "Wed Sep 11 11:19:39 2024 +0000"
      },
      "message": "tconsole: init\n\nThis introduces the \u0027tconsole\u0027 (terminal console), the default\ninterface to show in /dev/tty1 on a Metropolis node.\n\nCurrently it just shows some basic status in a single page. Upcoming\nchanges will reintroduce a simple log dump on a different page, as well\nas entirely new features like supervision tree inspection.\n\nTo iterate quickly on the console, a \u0027standalone\u0027 target is added which\nexercises the console on the user\u0027s terminal with fake node data.\nHowever only the actual console in Linux displays colours as intended.\n\nChange-Id: I5cfba2bdb320daa080a073e76bf0494aeab6a4d4\nReviewed-on: https://review.monogon.dev/c/monogon/+/3371\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "e1420ab79117be4c97818fa708f62fea3ff6d265",
      "tree": "e358545afc0d5510d3da8dee2fbed03355e87c3e",
      "parents": [
        "ca6da6adf2fa3b88c743c9d7f88ef9cfea4e0823"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Aug 27 01:53:16 2024 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Sep 10 12:10:01 2024 +0000"
      },
      "message": "treewide: migrate more to bzlmod\n\nThis does migrate nearly everything to bzlmod and away from the \"old\"\nWORKSPACE system. We do have to use some workarounds and there is no\ngood way to get the path to a repository. This definitively requires\nsome more love in future CLs but this should cover the basics. See\nmonogon-dev/monogon#343 for more information.\n\nChange-Id: I0e188d8708b66fcdbdf0adc9143c93160e3395ae\nReviewed-on: https://review.monogon.dev/c/monogon/+/3357\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "6b1b79a1ea5b255469e7de2bde3f7153cfbf1fd0",
      "tree": "00d5b1779a58e1e9d67d250753574e58c22e3cef",
      "parents": [
        "732a88411de08ac44d1f2bdb6b948c39c9ddc727"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Aug 27 00:04:18 2024 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Sep 03 19:50:23 2024 +0000"
      },
      "message": "MODULE.bazel: move additional MODULE.bazel files to build/bazel\n\nDon\u0027t mind me while I cleaning up the root directory 🧹\n\nChange-Id: I81678f56073a5d7acf283e10a08912d75bba4c73\nReviewed-on: https://review.monogon.dev/c/monogon/+/3356\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    }
  ]
}
