)]}'
{
  "log": [
    {
      "commit": "371faaca47a77fa1c567f26c082a1d8e9c7ce30f",
      "tree": "fee968b5e3263f9fde87d01cf0f75c06aaae039b",
      "parents": [
        "7d1538f30cda018f55303fb1a76a8ddf3286990a"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu Jul 17 14:02:58 2025 +0200"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu Jul 17 12:30:25 2025 +0000"
      },
      "message": "m/cli/metroctl: add multiplatform metroctl target\n\nThis adds a target which builds metroctl for multiple platforms. Because\nthis target will be built with \"bazel test //...\", we no longer need to\nexplicitly test building metroctl for various platforms in CI.\n\nBuilding fails with --config\u003drace; I added a target_compatible_with so\nthe target is skipped in this case.\n\nChange-Id: Ib747233bc8442af5f947d35289d36ddd147b7953\nReviewed-on: https://review.monogon.dev/c/monogon/+/4439\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "5d357d87ad3dc14bedbfd9e012eae5b8ff85f772",
      "tree": "1791af9ca36aabd988b8db1c81516debbf9036da",
      "parents": [
        "2b480f6eb860b94cf96f133f3700e08f18c76c40"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Jul 10 18:47:15 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Jul 16 21:14:12 2025 +0000"
      },
      "message": "treewide: remove FHSEnv\n\nTo remove the FHSenv, we have to patch rules_python to use\n/usr/bin/env to resolve the path to bash instead of hardcoding it.\nAdditionally, we now bring a Nix-compatible Bazel 8.\n\nChange-Id: Id51e7748eea6dd77185f43a52fe45b5110ba4a2b\nReviewed-on: https://review.monogon.dev/c/monogon/+/4427\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "2b480f6eb860b94cf96f133f3700e08f18c76c40",
      "tree": "3da0c62f81b8c67ab5138beb34be7f3b57ea05b6",
      "parents": [
        "26add7576e6d9346b33de5fbbccabba1108f4785"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jul 15 14:45:05 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jul 15 14:17:45 2025 +0000"
      },
      "message": "treewide: use go version from go.mod\n\nInstead of manually syncing the Go version we use to build,\nwe can tell rules_go to fetch it from our go.mod.\n\nChange-Id: Ic6bcf71ca67d0773c525ffaa0b992df34d5e7f5f\nReviewed-on: https://review.monogon.dev/c/monogon/+/4434\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "ea800253e8a4b5ddf44b9358fcc9e6c67f88ee78",
      "tree": "f5b197a7d1e6d5f089a736e175f8e63840a03299",
      "parents": [
        "8cd10304755dbd8962bc4e7b68af9ac3bcb99ffd"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Jul 09 07:00:29 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Jul 10 16:34:22 2025 +0000"
      },
      "message": "b/t/toolchain-bundle: add python3.12\n\nChange-Id: Iedf0c35f5f4334bf5c93c5cc937ef855cbabd5c6\nReviewed-on: https://review.monogon.dev/c/monogon/+/4411\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "03dadba89882b90e671a0942311e1588b37fc918",
      "tree": "1a722255b8f5238ead2911ba17b18e914433e235",
      "parents": [
        "62229cf857f1f205b4190bd3d6069928984e36fe"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Jul 09 06:58:03 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Jul 09 23:59:05 2025 +0000"
      },
      "message": "build/toolchain/toolchain-bundle: Add and use supported targets list\n\nThis makes the definitions less verbose.\n\nChange-Id: Ifc4d9853b408da876100c41e79bc9d4f4d800d63\nReviewed-on: https://review.monogon.dev/c/monogon/+/4410\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "62229cf857f1f205b4190bd3d6069928984e36fe",
      "tree": "050834d60ca831733825a83aceab78736a5a4404",
      "parents": [
        "59b49c9b57d37673ef4ecf0c2855280910fc4462"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Mon Jul 07 12:47:31 2025 +0200"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Wed Jul 09 18:03:12 2025 +0000"
      },
      "message": "treewide: update etcd to 3.6\n\nThis is a fairly large update, containing 4 years of upstream\ndevelopment. A lot of code has been moved around, requiring a rebase of\nall patches and ajustments in code using it.\n\nUpstream requires that upgrades first go through etcd 3.5.20, which is\ndone in a CL below this one. Other than that upgrades are possible\nthrough normal Monogon node updates, but downgrades (while implemented\nfor 3.6.0) are still not supported in Monogon until further work is\ndone.\n\nThere are significant issues in etcd synchronization between the\n\"outside\" manager (embed or standalone) and the core (EtcdServer), one\nof which affects removal of the ConsensusMember role, causing a panic\ndue to the client listener not being closed when the server shuts down\non its own. This is triggered by the autopromoter hitting an endpoint on\na shut-down etcd, which accesses a nil backend. This issue existed\nbefore, a full fix will likely involve either significantly rewriting or\ngetting rid of the embed package, so this just fixes the panic-causing\ncode path.\n\nChange-Id: If5932a7428a262fde406a5bb652a40d211301734\nReviewed-on: https://review.monogon.dev/c/monogon/+/4394\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "06341a6b1afd7e6c7c395bd6731c7df978c8c4e5",
      "tree": "afef720aecd0149092f252413db89d1b5ceba4da",
      "parents": [
        "2b9a0a0fcf0aeece55ba8792a22cfa42733823c0"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Wed Jul 09 08:02:35 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Wed Jul 09 14:53:49 2025 +0000"
      },
      "message": "build/binary_tarball: rename from static_binary_tarball\n\nThe static_binary_tarball rule no longer has a transition to build\nstatically, so the \"static\" part of the name is not meaningful anymore.\n\nChange-Id: Ifaecf2f7846a963d957d4bfcc89a3d9e7e911f5c\nReviewed-on: https://review.monogon.dev/c/monogon/+/4415\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "2b9a0a0fcf0aeece55ba8792a22cfa42733823c0",
      "tree": "b8694b0d0224bcdc37238306e00e68bf261bd71d",
      "parents": [
        "10d47cc2d5d64f2a0b0e9a70b7ce09a306a14c37"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Wed Jul 09 07:54:12 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Wed Jul 09 14:53:49 2025 +0000"
      },
      "message": "treewide: remove build_static_transition\n\nWe now build everything statically on Linux. This means we don\u0027t need\nthe build_static_transition anymore, as it has become a no-op.\n\nChange-Id: Id6b978daf09bf3e8e252d00da3795909d7ce3b75\nReviewed-on: https://review.monogon.dev/c/monogon/+/4414\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "66953ecf01f293fa3fe1619883682cafad67d866",
      "tree": "199930e9641b034474ce1143000cd74bd6d23914",
      "parents": [
        "12240f9bb95fae3b6c4737d825c498f35320e89b"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Jul 02 21:24:09 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jul 08 13:25:30 2025 +0000"
      },
      "message": "treewide: remove sandboxroot\n\nBe gone! 🎉\n\nChange-Id: Ibd032f4bcfe079c7d2acf4e444f543da30a14c53\nReviewed-on: https://review.monogon.dev/c/monogon/+/4398\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "12240f9bb95fae3b6c4737d825c498f35320e89b",
      "tree": "6cb9d3e47168fc7736c0ce484879f9d59cae9893",
      "parents": [
        "a92977339eef83af2cf94d28fe8786c0fafe53bc"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Apr 28 14:59:33 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jul 08 13:25:25 2025 +0000"
      },
      "message": "third_party/edk2: use toolchain-bundle for edk2 build\n\nThis moves the build into a custom rule instead of a genrule.\nThis also adds the AARCH64 build and renames the files to be more\ngeneric\n\nChange-Id: If6e3cecaf4011e2e39f13b1d40bcc7060cee3afb\nReviewed-on: https://review.monogon.dev/c/monogon/+/4154\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "6cca932dd18af0bb3e0c6dba5a71855983b3af19",
      "tree": "4c1df95b3663ccd40e44c03967d582c3732af96d",
      "parents": [
        "c3a6a05f3e140657c45abfdc9a945e2ab379d47c"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Apr 15 21:13:32 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jul 08 11:43:32 2025 +0000"
      },
      "message": "third_party/linux: use toolchain-bundle for linux kernel build\n\nThis contains lots of workarounds and should be migrated to a native\nbazel integration.\n\nChange-Id: Ib0a52daf3879df4d5369541475c42fa506a54328\nReviewed-on: https://review.monogon.dev/c/monogon/+/4101\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "c3a6a05f3e140657c45abfdc9a945e2ab379d47c",
      "tree": "baad4789b83e9ab93e43394d1944f6d2270a79a2",
      "parents": [
        "31c44491e5a1632f6f881df3b52beadddb57653c"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Jul 07 17:00:11 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jul 08 11:43:32 2025 +0000"
      },
      "message": "build/platforms: fix missing flags on remote execution platform\n\nChange-Id: Ie3408448a44a87cb099b5d4ef3d902c45669b6fe\nReviewed-on: https://review.monogon.dev/c/monogon/+/4401\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "c4c89601ff800c421caea620d7c183c3c616bb46",
      "tree": "305a1f1044aaaa7f0d4fb1e9e40ff81003aca131",
      "parents": [
        "83e86df1b58c6ff0a982c1241a83d240b878fef6"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Jul 07 17:00:11 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Jul 07 20:50:20 2025 +0000"
      },
      "message": "treewide: remove host_cc_toolchain, add static flags to linux platforms\n\nWith rules_rust now being able to build with our toolchain and sysroot,\nwe can finally get rid of the host_cc_toolchain.\n\nChange-Id: Ic63bc34ff94d152a9c2d8a01a6036255da5e14cc\nReviewed-on: https://review.monogon.dev/c/monogon/+/4397\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "22bea7550a9cb9265aa0c6a1dd118ff7e9b99300",
      "tree": "6e01d4401baf90f5bf7db588eb8ca7174671133e",
      "parents": [
        "1212ea1514581ce6a7779004270c0721262594ba"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu Jul 03 07:17:11 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu Jul 03 15:48:33 2025 +0000"
      },
      "message": "build/bazel: make Rust EFI builds reproducible\n\nThe abloader build was not reproducible because of this issue:\nhttps://github.com/rust-lang/rust/issues/112587\n\nWe don\u0027t need the PDB file, so this disables it.\n\nCo-authored-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nChange-Id: I8791d5c43ce23c3d1de1e0a3eeedc4d47f8eb4e7\nReviewed-on: https://review.monogon.dev/c/monogon/+/4386\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "590239d455014624c8e27abfd0c8cf92ec14eb67",
      "tree": "c9849c26bc8280428ab3e8cd30591408e845377b",
      "parents": [
        "8bb5dfa3f09433a84d8bdf3bbc8768969776e160"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Apr 15 17:35:22 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jul 01 10:52:37 2025 +0000"
      },
      "message": "treewide: configure rules_perl to our toolchain\n\nIn a future commit we will introduce openssl, which needs perl to\ngenerate asm code.\n\nChange-Id: I282c340c698ed339fb409514a9b09ffdf3475c34\nReviewed-on: https://review.monogon.dev/c/monogon/+/4096\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "98000a51baafc40f861bd17d8a333b65035df21c",
      "tree": "b6f7c11992b9c61d522c60a86b342a377ee160f2",
      "parents": [
        "a5a817009be47049d7302dd0c1ec08f13c1fe4a7"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Mar 06 14:22:15 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jul 01 10:52:10 2025 +0000"
      },
      "message": "third_party/nix: introduce toolchain bundle\n\nThis introduces a nix derivation that builds a musl amd64/aarch64\ntoolchain sysroot.\n\nChange-Id: Iba082edb8fd1f2ab580020bb1c7339a76487f3c8\nReviewed-on: https://review.monogon.dev/c/monogon/+/4006\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "8fd51cd0cb06584bdfe2e7884662276d0c7bfe9b",
      "tree": "88aecf3fc0a34f63eea2d9f761c41ce60cb49686",
      "parents": [
        "3259f9a5381cb2b79582e73db1fa2da24772698b"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Sun Jun 29 02:20:17 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Jun 30 00:02:45 2025 +0000"
      },
      "message": "treewide: remove bzlmod dependency workaround\n\nCloses #487 #486 #485 #484 #483\n\nChange-Id: I2de434dab96743f9051b8c2064fb9f7d05d548aa\nReviewed-on: https://review.monogon.dev/c/monogon/+/4350\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "16298986aba754618473fe7658f74c8ebe28ee7e",
      "tree": "c2542547264b317fd6bde3a14d34db3814d93b63",
      "parents": [
        "54a2cf98fec77bc2718ec82881dd7d105f7154f1"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Jun 25 01:08:14 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Jun 25 14:29:17 2025 +0000"
      },
      "message": "build/mirror_proxy: replace rules_pkg with static_binary_tarball\n\nChange-Id: I184e1d36cc22b3075e5d7b49c40856a684b45976\nReviewed-on: https://review.monogon.dev/c/monogon/+/4301\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "2da91b9ecb9113ec8afb8e67baf749c0d56f8a73",
      "tree": "767c30441bd1a43393c72fd08704ef8ceca096f0",
      "parents": [
        "b0f019c5976abc762bb7ec95462a7e346905bac2"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Apr 15 21:10:12 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jun 24 15:56:14 2025 +0000"
      },
      "message": "treewide: introduce cc_static_library_with_headers\n\nTo properly wire up cc_libraries we need to build them static and\nkeep the headers. Thats not possible with vanilla cc_static_library.\n\nChange-Id: Ia72660636086132eec6722f19b4233d45ce8f837\nReviewed-on: https://review.monogon.dev/c/monogon/+/4098\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "b0f019c5976abc762bb7ec95462a7e346905bac2",
      "tree": "4de86531863b85fc24cc12808d7ca0ab1e49dc06",
      "parents": [
        "da4f4d2ab786e2b8077c165ec4135fe70d68ff94"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Apr 15 21:12:22 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jun 24 15:56:10 2025 +0000"
      },
      "message": "build/utils: modify detect_root to use list instead of files\n\nThis is required to be able to use this with runfiles.\n\nChange-Id: I73021136d622c2b70303a57b05ff768ebc316479\nReviewed-on: https://review.monogon.dev/c/monogon/+/4100\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "03793e009d9d0c46b991f8d55aa33673b36f87c9",
      "tree": "60a50b5b0b45f6eff3098e99d1e3988bc1ad5422",
      "parents": [
        "f8fe18114ed2d7875315818d81235691c315ac96"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Apr 15 17:41:39 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jun 24 15:01:44 2025 +0000"
      },
      "message": "treewide: setup libelf build\n\nChange-Id: I42ead2eac3be455015a302f947dfcc311057e46e\nReviewed-on: https://review.monogon.dev/c/monogon/+/4097\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "e08c16075bd39da9194aff89e4e9f479740ae56d",
      "tree": "29ed52fd7a3c76cb0a9d18248bac098ae61e97fa",
      "parents": [
        "a0bd93fa37ccabae99b81bdd604cef1aee7d481d"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Jun 17 19:19:33 2025 +0200"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Jun 19 10:49:00 2025 +0000"
      },
      "message": "m/n/core/network: implement LLDP transmission\n\nImplements simple LLDP transmission-only support for Monogon OS. It\nadvertises enough to do topology discovery through LLDP. Currently it\nsupports MAC address, interface name, node name and product\nname/version. More information can be added in the future.\n\nTested using Wireshark on launch-cluster node/switch traffic.\n\nChange-Id: If5777bc042ef87bd8d26c548324c6de6f14f7270\nReviewed-on: https://review.monogon.dev/c/monogon/+/4282\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "a0bd93fa37ccabae99b81bdd604cef1aee7d481d",
      "tree": "2c27694575fec874d0838a332fb2b12935f65d80",
      "parents": [
        "04b6708ade95866a6c35f3d78da713ee603fc2c1"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed May 28 18:03:34 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Jun 18 21:35:04 2025 +0000"
      },
      "message": "treewide: replace gperf archive with bzlmod dependency\n\nChange-Id: I7208f1868792abbd5cd5de79a4438a243d1e5b67\nReviewed-on: https://review.monogon.dev/c/monogon/+/4233\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "04b6708ade95866a6c35f3d78da713ee603fc2c1",
      "tree": "d15640e401efaed10283856fae56434e0767e539",
      "parents": [
        "a6864bbc6f283898fea79d666e44a3be776410e1"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed May 28 17:40:07 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Jun 18 21:35:04 2025 +0000"
      },
      "message": "treewide: replace libcap archive with bzlmod dependency\n\nChange-Id: I571a5e58640e567cfa1c9a6d2c5bc90d99b8fc46\nReviewed-on: https://review.monogon.dev/c/monogon/+/4231\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "5299a6073c62516b72f52e42413e1078f287989d",
      "tree": "938af61f2616b3d9caab7e5261a16b6e25a70200",
      "parents": [
        "d4817496c23ab0b39b94ffc5a47ba63be0cf23ed"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Wed Jun 18 11:50:41 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Wed Jun 18 13:09:09 2025 +0000"
      },
      "message": "third_party/musl: delete\n\nThis is no longer used after the migration to toolchain_cc.\n\nChange-Id: Ib0c1a80be4aa80c4f08d9b2927ceabd5bb4b4148\nReviewed-on: https://review.monogon.dev/c/monogon/+/4284\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "d4817496c23ab0b39b94ffc5a47ba63be0cf23ed",
      "tree": "b21338c9e3adbd055c72fd5000b7c9f1a9799d10",
      "parents": [
        "2caadc7b37bca50bb50d74fd1f181c8e77915f38"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Jun 16 15:03:12 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Jun 18 12:34:13 2025 +0000"
      },
      "message": "treewide: bump dependencies\n\nChange-Id: Ibe397cb7eb2f2c591cb1affa5272616197a6c31c\nReviewed-on: https://review.monogon.dev/c/monogon/+/4281\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "2caadc7b37bca50bb50d74fd1f181c8e77915f38",
      "tree": "a14f8ddcf74d248da4ecb9592a358eb7190bd698",
      "parents": [
        "b480450a7919e01704ebdef113c3ac11d7d55867"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed May 28 17:34:57 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jun 17 12:23:03 2025 +0000"
      },
      "message": "treewide: replace glib archive with bzlmod dependency\n\nChange-Id: I1476b6fbdd6a602bb2cf87d37f3fa1e7fd4afac4\nReviewed-on: https://review.monogon.dev/c/monogon/+/4230\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "b480450a7919e01704ebdef113c3ac11d7d55867",
      "tree": "d0c09823a558b48507d0f35c60ab43983a43acc8",
      "parents": [
        "20d0f5a0a97995ee6179ad20bd0c4b3521bf54c8"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed May 28 17:33:27 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jun 17 12:23:03 2025 +0000"
      },
      "message": "treewide: replace boringssl archive with bzlmod dependency\n\nChange-Id: I126d2c798d8588ac3b6a6006a6b0d7a45445b353\nReviewed-on: https://review.monogon.dev/c/monogon/+/4229\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "441eb16a26ff9ca41c866645cb97d50792361117",
      "tree": "2d2f6a00b52daf5a989a51b653a2a69296bfc08e",
      "parents": [
        "4b8882699a307857c52e2faa3d4dfa544b188cd1"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed May 28 18:03:21 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Jun 16 16:15:59 2025 +0000"
      },
      "message": "treewide: force mirror urls to https\n\nChange-Id: If661078d9c5f9b75d4918a00de7ad54069d06b7c\nReviewed-on: https://review.monogon.dev/c/monogon/+/4232\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "e6c0c329809eeca1c800eeec44a5599a0cf45f6b",
      "tree": "35ccb939eb9b0de15abd0d30da4b4eb260f3e4b6",
      "parents": [
        "e342086c9d71e3eb38c0a159e559ab4de0033492"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Mon May 12 16:14:25 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Mon Jun 16 15:41:59 2025 +0000"
      },
      "message": "treewide: build product info\n\nThis change adds the type definition and generator for product info,\nwhich will be added to the OCI OS image to provide information about the\ncontents.\n\nHere is an example product info:\n\n{\n\t\"id\": \"metropolis-node\",\n\t\"name\": \"Metropolis Node\",\n\t\"version\": \"0.1.0-dev1059\",\n\t\"variant\": \"x86_64-race\",\n\t\"commit_hash\": \"56248c1c1d5039bdf3c1043ade88f3f158ceb52b\",\n\t\"commit_date\": \"2025-05-08T18:26:46+00:00\",\n\t\"build_tree_dirty\": true,\n\t\"components\": [\n\t\t{\"id\": \"linux\", \"version\": \"6.12.15\"},\n\t\t{\"id\": \"kubernetes\", \"version\": \"1.32.0\"}\n\t]\n}\n\nThe product info has the same inputs and a similar purpose as the\nos-release file, so they are both generated by the same build action.\n\nChange-Id: I89d453f2d72ac9df49e404f46381cd594534f800\nReviewed-on: https://review.monogon.dev/c/monogon/+/4192\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "6ff6b45b266b0ef0768d5172769ba1d725b10124",
      "tree": "1150c8f1c1b2393384d0c5e2e2b0b8336230971a",
      "parents": [
        "043c0b4c1a89078eafe4c8faefa78ccbadf3a233"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu May 22 14:35:09 2025 +0200"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Wed Jun 11 19:46:15 2025 +0000"
      },
      "message": "third_party/efistub: update to use PE entry point\n\nThe old efistub used the EFI handover mechanism, which only exists for\nx86_64. Since Linux 5.8 x86_64 also supports the standard PE entry point\nwhich works the same for all supported architectures. That also has the\nbenefit of no longer needing a weird hack to switch to SysV ABI to call\ninto the kernel.\n\nChange-Id: Icd75599758e09d888a31c31f07967dfc78356fca\nReviewed-on: https://review.monogon.dev/c/monogon/+/4213\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "043c0b4c1a89078eafe4c8faefa78ccbadf3a233",
      "tree": "9c2f5c9059b6df4730918bdedb7d617685fbf836",
      "parents": [
        "b21bdf9e01a4211cc0b8f91fc7beb113a9ed86c3"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Mar 13 21:09:36 2025 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Jun 05 17:02:25 2025 +0000"
      },
      "message": "treewide: migrate to toolchain_cc\n\nThis contains the first part of the toolchain_cc migration. It leaves\nthe native host GCC, but everything that we ship is now built with\ntoolchain_cc with the exception of Linux which gets migrated later in\nthis stack.\n\nChange-Id: Icb3422857fd3baf0ff61b7edd5754517f6a73dfc\nReviewed-on: https://review.monogon.dev/c/monogon/+/4012\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "b21bdf9e01a4211cc0b8f91fc7beb113a9ed86c3",
      "tree": "4b5be2005cb81ca338fde86ae0706d935c67b6aa",
      "parents": [
        "d0d5d9dd04574305cf86bf1eb3e787549100ea28"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed May 28 18:37:35 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Jun 02 20:51:18 2025 +0000"
      },
      "message": "treewide: delete cloud/ except cloud/agent\n\nbmdb is no longer used in production and would be hard to maintain. The only non-stub provider is Equinix Metal, which is shutting down in 2026, and we are moving away from CockroachDB. Keep the agent, which we\u0027ll need for Monogon Cloud.\n\nChange-Id: If8b35c3ac8cdeed96a2b1814c0de7607e8acec63\nReviewed-on: https://review.monogon.dev/c/monogon/+/4235\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "36f3b6dcbcfd359b744a29cf9245c9dd6879435f",
      "tree": "ee0dcb43cd1a7c22a1fcbaa379d949bd4362b758",
      "parents": [
        "afb922cfba991a2af1473da5850b75e8db03dd56"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Tue May 20 09:05:12 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Tue May 27 07:32:21 2025 +0000"
      },
      "message": "treewide: replace stampsrcs with embed\n\nA rules_go maintainer suggested using embed instead of stampsrcs:\nhttps://github.com/bazel-contrib/rules_go/issues/3507\n\nFor Kubernetes, this means we need to patch the version libraries.\nInstead of creating a separate file for each variable, I put them all in\none file, which is parsed in an init function. This init function needs\nto run before all other init functions, which access the variables.\n\nAnother benefit of this change is that versions are stamped in all\nbinaries which include Kubernetes client libraries, not just hyperkube.\n\nChange-Id: Ib1157d3686fc35e0c4191d2fc8e165862a1973c7\nReviewed-on: https://review.monogon.dev/c/monogon/+/4208\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "56248c1c1d5039bdf3c1043ade88f3f158ceb52b",
      "tree": "ce29b41e052bc5ca6b7b1bb22acb390c09212178",
      "parents": [
        "51c6748c2158d7dbc1ec79ada63a5e68a27f8533"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Mon May 05 13:34:18 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu May 08 18:26:46 2025 +0000"
      },
      "message": "build/bazel: enable Rust aarch64 UEFI toolchain\n\nThis is required to build the abloader for aarch64.\n\nChange-Id: I25b46a8b7b1f335e5e8b589c4a868fb1412b9c9c\nReviewed-on: https://review.monogon.dev/c/monogon/+/4174\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "51c6748c2158d7dbc1ec79ada63a5e68a27f8533",
      "tree": "0e14029e3c73d4130b388904aba3237a7224f157",
      "parents": [
        "230a31aec7de7270e5a89a81443f69f9525ad4db"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Mon May 05 13:11:55 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu May 08 18:26:46 2025 +0000"
      },
      "message": "treewide: implement basic aarch64 support\n\nThis adds aarch64 platforms, and some fixes for aarch64 support. This is\nnot yet complete; e.g. toolchains for aarch64 targets are still missing.\n\nI renamed the amd64 platforms to x86_64 and efi to uefi for consistency\nwith @platforms.\n\nsyscall.Dup2 does not exist on arm64, but unix.Dup2 does.\n\nChange-Id: I3ab081b2b852945b723ec83768f79000b8c4def4\nReviewed-on: https://review.monogon.dev/c/monogon/+/4173\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "230a31aec7de7270e5a89a81443f69f9525ad4db",
      "tree": "bf5fffb68a6cccf4d47505173e036f047979614e",
      "parents": [
        "a81e2a66cf2160d4782d06c4278cbd8a85145f6a"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Mon May 05 12:28:50 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu May 08 18:26:46 2025 +0000"
      },
      "message": "build: switch to build settings for static build\n\nThis switches the way to select static linking for C builds from a\nconstraint_setting to a build_setting. The benefit of this is that the\ntransition to static linking no longer depends on the architecture,\nbecause this setting is not part of the platform anymore.\n\nThe alternative would be to select the matching static platform based on\nthe architecture in the transition implementation. However, I did not\nfind a good way to obtain the architecture in a transition\nimplementation. You can access the platform through the settings\nparameter, but it\u0027s not clear how to extract the architecture from that.\nSomething that would work is to define an attribute for the architecture\non the rule where the transition is used, and fill this attribute using\na select() at the point where the rule is instantiated. But this\nrequires changes to all rules which use the transition, which is ugly.\n\nChange-Id: I8962e24b561b8d1724bac785cb3739cdc434d47e\nReviewed-on: https://review.monogon.dev/c/monogon/+/4172\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "a81e2a66cf2160d4782d06c4278cbd8a85145f6a",
      "tree": "cbc40ee9305ddfce108a1e2eb292820ca87ed166",
      "parents": [
        "df588d069ca78101325c1e6860ec226209c10c31"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Mon May 05 12:02:24 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu May 08 18:26:46 2025 +0000"
      },
      "message": "treewide: exclude flags from exec config\n\nThis enables the --experimental_exclude_starlark_flags_from_exec_config\nflag, which disables propagation of config settings across exec\ntransitions. This way, only one copy of protoc is built, without needing\na custom toolchain which ignores the settings.\n\nSee https://github.com/bazelbuild/bazel/issues/22457 for discussion\nabout this flag. Apparently, Google has enabled the flag internally.\n\nChange-Id: I750af589563ec40c59599a555bebe1a986d04d4a\nReviewed-on: https://review.monogon.dev/c/monogon/+/4171\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "df588d069ca78101325c1e6860ec226209c10c31",
      "tree": "2e4d490fae6490e6f5bf810c794aa1192a78180c",
      "parents": [
        "bddad354b8dd768a7b883b12ca7274b04ce05bc6"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Wed Apr 23 15:17:11 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu May 01 06:49:22 2025 +0000"
      },
      "message": "treewide: remove \"v\" prefix from versions\n\nA semantic version does not have a \"v\" prefix.\nhttps://semver.org/#is-v123-a-semantic-version\n\nChange-Id: I95aa2014ba3330d33428e57e5f354eabfe6d1423\nReviewed-on: https://review.monogon.dev/c/monogon/+/4170\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "bddad354b8dd768a7b883b12ca7274b04ce05bc6",
      "tree": "54906615cc7d434703b729784eda51a61c77b51b",
      "parents": [
        "10670e58174de17d42ecfe77e45f9826df8a6c74"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Wed Apr 23 14:55:26 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu May 01 06:49:22 2025 +0000"
      },
      "message": "treewide: fix nostamp\n\nPreviously, --nostamp did not disable all stamping with commit info,\nwhich meant that metropolis e2e tests ran on CI even if no change was\nmade to metropolis code. Now, --config:nostamp does this properly.\n\nThe Bazel --nostamp flag is supposed to disable stamping. Ideally, this\nmeans that the workspace status script is not executed. But we can\u0027t do\nthat because the metropolis version is required (e.g. for compatibility\nchecks), and we currently obtain the version from git tags. Another\noption is to check whether the --nostamp flag is set in the status\nscript, and omit any git commit info in this case. But I didn\u0027t find a\nway to access the --nostamp flag from the status script, so instead, the\n--config:nostamp flag is introduced and replaces --nostamp.\n\nVersions without git info are marked with a \"-nostamp\" suffix.\nI adjusted //version to handle this case.\n\nChange-Id: I34e1b59b908074e8d4234013358b6be41899570a\nReviewed-on: https://review.monogon.dev/c/monogon/+/4169\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "10670e58174de17d42ecfe77e45f9826df8a6c74",
      "tree": "60bdeb81a03af09ad57632a818608c6aa1b0a8bd",
      "parents": [
        "0cbf51a530ff05eaacadb12c4cc977c24a0f0fb0"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Wed Apr 23 12:54:48 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu May 01 06:49:22 2025 +0000"
      },
      "message": "treewide: dynamically generate copyright line\n\nA copyright line with hardcoded year was shown in various places of the\nUI. Instead, take the year from the commit date.\n\nChange-Id: I424d6c5b3aff34fe4479c37f30f9ea280b7eb4af\nReviewed-on: https://review.monogon.dev/c/monogon/+/4168\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "0cbf51a530ff05eaacadb12c4cc977c24a0f0fb0",
      "tree": "fd14354e8ba64d68489f1f4b0116696baf5ee57f",
      "parents": [
        "4cfff958acf023e190191a2842103897201c4dad"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Wed Apr 23 10:21:17 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu May 01 06:49:22 2025 +0000"
      },
      "message": "m/n/k/hyperkube: avoid unnecessary rebuilds\n\nPreviously, hyperkube was rebuilt each time a commit was made in the\nmonorepo. This change stops this by reading the variables from a\nfiltered stamp file instead. Now, only this filtered file is rebuilt\neach time, which is very fast compared to linking hyperkube.\n\nPreviously, volatile status variables were used for gitTreeState and\nbuildDate. But the volatile status is bad for reproducibility, as it\nmakes Bazel intentionally use stale caches.  Instead, these variables\nare now only defined in release builds, and left unstamped during\ndevelopment. These variables are available at the /version endpoint of\nthe apiserver, so there may be some utility in defining them for release\nbuilds, but they are not needed during development.\n\nThe buildDate is now taken from the commit date instead of\nSOURCE_DATE_EPOCH, which simplifies the build process as we don\u0027t need\nto define that variable anymore.\n\nPreviously, KUBERNETES_gitCommit was referenced but not defined by the\nstatus script. It is now defined as the monorepo commit, which is more\nuseful than leaving it blank.\n\nChange-Id: I6228888507e400ca1f53167ee9d4f132f5711a45\nReviewed-on: https://review.monogon.dev/c/monogon/+/4167\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "4cfff958acf023e190191a2842103897201c4dad",
      "tree": "fcfce746a89ec85fc47ab4c2901ca43dbdc78142",
      "parents": [
        "e269ebf50c81807a8bac8b274590c6441bb84ca9"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Wed Apr 23 10:05:39 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu May 01 06:49:22 2025 +0000"
      },
      "message": "build: add support for filtered stamp file\n\nThe stable status file changes whenever a commit is made, which triggers\nunnecessary rebuilds of targets which are only stamped with variables\nwhich change less often. My idea for fixing this is to create a filtered\nstamp file with only the variables which change less often, and then\nmake targets depend on this more stable stamp file instead of the stable\nstatus file.\n\nThis change adds a Bazel rule for generating such a filtered stamp file,\nand a patch for rules_go which allows using the filtered file in x_defs.\n\nChange-Id: I1a98babeb0cc5edeac6a90c655117305c499f744\nReviewed-on: https://review.monogon.dev/c/monogon/+/4166\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "219c2c68a75f0de70d6cbaf5f6be55d5bf32378f",
      "tree": "fd1040c7e82e6a4243b72ed50f5e8b7e30a88bf3",
      "parents": [
        "778cc33e311ab1578b3e1447c10b7d40612a774e"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Wed Apr 30 08:14:25 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Wed Apr 30 10:17:21 2025 +0000"
      },
      "message": "build/toolchain/protobuf: fix duplicate protoc build\n\nWe were building way too many copies of protoc. Many of these are due to\na bug in rules_go when --incompatible_enable_proto_toolchain_resolution\nis enabled, but not all, so we should do this anyway, and then the bug\nin rules_go is no longer relevant.\n\nBefore:\nbazel cquery \"deps(//...) intersect @protobuf//:protoc\"\n@protobuf//:protoc (e5c4511)\n@protobuf//:protoc (40d0309)\n@protobuf//:protoc (3bbe29a)\n@protobuf//:protoc (070fbf5)\n@protobuf//:protoc (ee343a7)\n@protobuf//:protoc (c3e4ff6)\n\nAfter:\nbazel cquery \"deps(//... except //build/toolchain/protobuf/...) intersect @protobuf//:protoc\"\n@protobuf//:protoc (ee343a7)\n\nChange-Id: I6a826b7bc01453284982204aea808f8f2902d84c\nReviewed-on: https://review.monogon.dev/c/monogon/+/4164\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "0fd36f458729a67e4daf68a430ce3a79428a05e9",
      "tree": "dae4bd858448b6a72daeab0cbeb177da802aff11",
      "parents": [
        "7c38e7845bad04db14031741e879e887e2f571b5"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Tue Apr 29 10:26:03 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Tue Apr 29 13:11:33 2025 +0000"
      },
      "message": "treewide: enable pure Go by default\n\nPure can be safely enabled by default. For those targets which need cgo,\nwe can set `pure \u003d \"off\"` on the go_binary or go_test.\n\nThis simplifies transitions, and makes the files/files_cc distinction\nobsolete.\n\nChange-Id: Ic1a985e7d347a7222f55735c1ee2016e8a7e1c65\nReviewed-on: https://review.monogon.dev/c/monogon/+/4158\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "7c38e7845bad04db14031741e879e887e2f571b5",
      "tree": "8481308f7280a6153de818497d11f0c9614baeeb",
      "parents": [
        "dc97912eb162144d7bd92509ad8f064a8cf98ecb"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Tue Apr 29 09:23:37 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Tue Apr 29 13:11:33 2025 +0000"
      },
      "message": "treewide: replace go_binary_with_tag\n\nInstead of using go_binary_with_tag, we can write a go_binary rule which\nembeds the library. Then we can easily change all the Go configs, not\njust tags.\n\nBy default, Gazelle generates the libraries for a go_binary with private\nvisibility, so we need to override it to pulic. The go_binary_with_tag\nrule had the additional feature of combining the specified tags with the\nincoming ones (osusergo, netgo); instead I added those manually.\n\nChange-Id: I23965176f87e3a0bbd18ba5a72f190e4f9047363\nReviewed-on: https://review.monogon.dev/c/monogon/+/4157\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "9d2f3c681fee76b54dc202da6ca140151f588be8",
      "tree": "9f673387eea27eac06fbd16e9c2f3cfc689cc7fb",
      "parents": [
        "82900a743f1eebcb80c0a310563be149691b89a7"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Mon Apr 14 11:17:22 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Tue Apr 29 06:55:58 2025 +0000"
      },
      "message": "m/test/localregistry: use osbase/oci/registry\n\nThis replaces the localregistry implementation with a small wrapper\naround the new registry package.\n\nThe images attribute of the Bazel rule was changed from a list to a\ndict, which makes the repository and tag independent from the file path.\n\nChange-Id: I1f6213dd67f7bdcf2373fe136958caa68b9f4d10\nReviewed-on: https://review.monogon.dev/c/monogon/+/4089\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "b48174d1865861e5992136415b1e86d3cac4e7fd",
      "tree": "f74a6e47d0b870db70ee11e930341b1d33add7da",
      "parents": [
        "27da2e6feeaee5acaf47ccca3efceb534755628b"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Mon Apr 14 10:13:02 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Tue Apr 29 06:55:58 2025 +0000"
      },
      "message": "osbase/oci: add package\n\nThis adds the oci package, which contains types and tools for working\nwith OCI images.\n\nChange-Id: Ie2a1d82c7ac007f5d1ad47666880dbf8a8bd931d\nReviewed-on: https://review.monogon.dev/c/monogon/+/4085\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "db0852264ed945b57320a43665069eee766c8ca8",
      "tree": "a3fd95d3526573ece244d2814114d2bb9e372cce",
      "parents": [
        "08054caeaa6bd5a7008357b628073118da4dc865"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Apr 28 20:58:18 2025 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Apr 29 00:13:59 2025 +0000"
      },
      "message": "build/github_repository: allow storing submodule_info as attr\n\nCurrently we are doing too many requests to the REST API as our CI is\ninvalidating the cache too often. This is a workaround until we can\nstore said data inside MODUEL.bazel.lock.\n\nChange-Id: Iac9be2a4ed3d3fb5f301ac63545d07d807cc2f8e\nReviewed-on: https://review.monogon.dev/c/monogon/+/4156\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "b8500fb0d7463f8fd629148fd0760ece2a4e7102",
      "tree": "a24ad2e9d425d59e89451f88288a6ea7db91855e",
      "parents": [
        "173c4124be37a158c7a8e4cafdab1696d05b6e69"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Mar 24 15:57:52 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Apr 02 09:00:33 2025 +0000"
      },
      "message": "build/rust: move to build/toolchain/rust-efi\n\nChange-Id: I57362142bb77bb9e09b51140f2c5a0ee4b6f597d\nReviewed-on: https://review.monogon.dev/c/monogon/+/4031\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "173c4124be37a158c7a8e4cafdab1696d05b6e69",
      "tree": "737b8dac7086d5d6e76bb56afc7b80402b82d900",
      "parents": [
        "936c35d350139c6d8ef95c6c498a0a0b163842ca"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Mar 24 15:34:34 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Apr 02 09:00:33 2025 +0000"
      },
      "message": "build/toolbase: delete unused code\n\nChange-Id: I25ac3e6671bb6213aa9563ee9aa2b0afc2337805\nReviewed-on: https://review.monogon.dev/c/monogon/+/4030\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "936c35d350139c6d8ef95c6c498a0a0b163842ca",
      "tree": "497f809b754d42cd49f357344dfea4ad749ba23a",
      "parents": [
        "d0cdb57f3d19239d987ffc58d3bb89760837953b"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Mar 24 15:34:00 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Apr 02 09:00:33 2025 +0000"
      },
      "message": "build/gotoolwrap: delete unused package\n\nChange-Id: Ie3d4bac9ba52b0d0eae9cafcc141072cf6102ffc\nReviewed-on: https://review.monogon.dev/c/monogon/+/4029\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "2368dc7f001e4762b77de92cdf95da5553bb1105",
      "tree": "29600c666b4e296eba3c886c14528aa1e21e1853",
      "parents": [
        "4c7bb3771714b9f7c136195bca510fda258ebb05"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Wed Mar 26 09:19:10 2025 +0000"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Wed Mar 26 13:45:05 2025 +0000"
      },
      "message": "go.mod: update nftables and drop patches\n\nI have upstreamed these patches.\n\nChange-Id: I27abbea4fa3ce25450f2e14a7247ddc9eeff676a\nReviewed-on: https://review.monogon.dev/c/monogon/+/4041\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "b1780f334762d88d3b2ee45a319711318f24fdc3",
      "tree": "c9ea4352a3031fd722858a96ab6d1713666fea3b",
      "parents": [
        "ad4d9545ac74b43c3f442627b507d45f7eec3b3f"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Mar 24 15:33:51 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Mar 25 21:15:13 2025 +0000"
      },
      "message": "build/savestdout: delete unused package\n\nChange-Id: I81ac21bd5d457a25f7d591bff41c7cf7e88a4fca\nReviewed-on: https://review.monogon.dev/c/monogon/+/4028\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "a0684409400aa22f39b44a125dc07729e98c4908",
      "tree": "f1891aad87d36ac36a93087ff66f8cd753b9f56d",
      "parents": [
        "17ad63fa0b09d3dfe461ac237cd5db5eaeefc2ed"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 25 11:32:40 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Mar 04 15:54:37 2025 +0000"
      },
      "message": "treewide: bump go deps and cleanup nogo linter config\n\nThis includes a patch for rules_go that is not merged yet, that allows\nto run nogo against all external dependencies.\n\nChange-Id: Ie874278d01e94116a2c3898bc98084c961318fd9\nReviewed-on: https://review.monogon.dev/c/monogon/+/3983\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "17ad63fa0b09d3dfe461ac237cd5db5eaeefc2ed",
      "tree": "aa133f4b89c91044047c902dad5b752696098b14",
      "parents": [
        "12e4b549f88c91e5eccb2abe1631793c879a66c6"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu Feb 27 14:43:56 2025 +0100"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu Feb 27 17:33:51 2025 +0000"
      },
      "message": "m/n/kubernetes/networkpolicy: add Cyclonus test suite\n\nThis adds a test for the network policy controller, based on the\nCyclonus test suite. Running Cyclonus on a real cluster takes multiple\nhours, as there are over 200 test cases, each of which takes around 1\nminute. The test implemented here uses a fake Kubernetes API and pods,\nwhich allows running all tests in around 15 seconds.\n\nIPv6 is partially implemented but disabled. The tests pass, but each\ntest takes around 2 seconds, because some ICMPv6 replies for blocked TCP\nconnections seem to get lost somewhere and are only processed when the\nTCP SYN is resent one second later.\n\nChange-Id: Id77f2dd4d884b6d156e238e07e88c222e3bbe9a2\nReviewed-on: https://review.monogon.dev/c/monogon/+/3905\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "ec03df42d643603d0a8d92b0db1cc4a4a865651e",
      "tree": "cc8292ee06d10ff186ef26e8b36730cb14a500e0",
      "parents": [
        "6e2839e982bf86f7a7a9b14f10d6d3c39c070fa0"
      ],
      "author": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu Feb 27 14:30:45 2025 +0100"
      },
      "committer": {
        "name": "Jan Schär",
        "email": "jan@monogon.tech",
        "time": "Thu Feb 27 15:16:44 2025 +0000"
      },
      "message": "treewide: update nftables to 0.3 with patches\n\nThis update nftables to 0.3. The bigger-buffer patch is no longer\nneeded, because it turns out that it is possible to increase the buffer\nsize using nftables.WithSockOptions, which k8s-nft-npc now does. I added\ntwo new patches which implement features which we need for k8s-nft-npc.\nI made upstream PRs for these which are still pending review.\n\nChange-Id: Iefbf850147a4c6dfd110e356fb43e822f436e843\nReviewed-on: https://review.monogon.dev/c/monogon/+/3994\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "ffd8c7bb37da9b72eb66a0555e319ca2290ea761",
      "tree": "fe656d2063543dc01aadcd4ef175652b48a925d3",
      "parents": [
        "12cab56e96b6591f4756bdca96e26260431fbcda"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Feb 24 22:02:01 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Feb 27 07:43:12 2025 +0000"
      },
      "message": "build/bazel: bump edk2 to stable202502\n\nCloses monogon-dev/monogon#313\n\nChange-Id: I99189a0aabae21b7647e78e1cae4f094298611dc\nReviewed-on: https://review.monogon.dev/c/monogon/+/3967\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "d842aaf9b5b45c6a0851542e8c9d21032f99a249",
      "tree": "1aab5f477d1019cf62e1f69b160afc3d639e2722",
      "parents": [
        "44c31a087929a16e93700d7d92fcff1bd066b8c0"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Mon Feb 17 17:39:46 2025 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Feb 25 16:04:05 2025 +0000"
      },
      "message": "workspace: update linux to 6.12.15\n\nSwitch to the current 6.12 LTS branch and rebase the patches.\nAlso switch to using savedefconfig for config instead of just including\nthe entire thing. This makes it much more readable as it only contains\nsettings we\u0027ve touched.\n\nChange-Id: I2b15944f0083399290a2539c42e37205e839bf36\nReviewed-on: https://review.monogon.dev/c/monogon/+/3908\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "44c31a087929a16e93700d7d92fcff1bd066b8c0",
      "tree": "76ddd39d59924d802597f69b3d7fca98b3c290fc",
      "parents": [
        "2979a43dca3baa48a5019f1b84a6858a4e674ec6"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Feb 24 21:55:59 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 25 14:23:22 2025 +0000"
      },
      "message": "build/github_repository: fix wrong template arg\n\nChange-Id: Id29f781e05cc8902ae37874eebf358352a9d6f76\nReviewed-on: https://review.monogon.dev/c/monogon/+/3966\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "515f1f3cb911f9afe31867ef9a5f4a976ce6d85b",
      "tree": "f76498cb3a4cbe971a2debd3b64efd2600c0d033",
      "parents": [
        "0edf66c5e42b4cff2a1a95316c1737ac7a0be7f9"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Feb 24 18:51:31 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 25 14:23:22 2025 +0000"
      },
      "message": "treewide: bump go to 1.24.0\n\nChange-Id: I1638653ac419205fcaaad99bc54c7ff52e94f930\nReviewed-on: https://review.monogon.dev/c/monogon/+/3961\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "16cb15ab5aa2fc0193a1534e65ba2e527e3e8f56",
      "tree": "0d04d148f5127884b12f73b9bc6f83804c65d4cd",
      "parents": [
        "7b1e4c1e89ba5507dd029984a29739b3d43f6846"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Feb 24 18:47:48 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 25 14:23:22 2025 +0000"
      },
      "message": "treewide: explicity load built-in rules\n\nIn Bazel 9 all autoloaded rules will be disabled. This prepares us for\nthat.\n\nChange-Id: Ibaa4fa2e6b7095922a5699d2d5f3ae6c2cba3552\nReviewed-on: https://review.monogon.dev/c/monogon/+/3939\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "7b1e4c1e89ba5507dd029984a29739b3d43f6846",
      "tree": "83b1e84285c0833b519390340f706e5781dcd3d4",
      "parents": [
        "9663a1ae47ef87c9711e3325800547e4fdda500d"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 25 07:55:51 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 25 08:55:35 2025 +0000"
      },
      "message": "build/analysis: move unparam exclude to generic loop\n\nChange-Id: I6c22fef724bfef326ba90fef9679b3b90c4ed7dd\nReviewed-on: https://review.monogon.dev/c/monogon/+/3982\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "9663a1ae47ef87c9711e3325800547e4fdda500d",
      "tree": "daf868ab0042420d6f3635aced0f6af9e99eb7ab",
      "parents": [
        "a153f52607c8b880d2351299feea5f042186310a"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 25 07:54:11 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 25 08:55:35 2025 +0000"
      },
      "message": "build/analysis: cleanup haslicense excludes\n\nChange-Id: Ide3d2c590b6a9cfbbe48e9f635c0be4bdba53f1a\nReviewed-on: https://review.monogon.dev/c/monogon/+/3981\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "74a233165b0cbf299aa9d9d38310e327f4ba8759",
      "tree": "842c3f8a20c04d335dc7a9437012ebd647fb1d29",
      "parents": [
        "30553e846b16792852340975d75191ef104cdd9b"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Feb 10 23:12:24 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 11 18:28:55 2025 +0000"
      },
      "message": "build/bazel: set supported_platform_triples for crate_universe\n\nThe default setting contains way too many targets which are getting spliced together. By overriding them to our actual triples, we can reduce the analyze time by over 30s.\n\nChange-Id: I8b4d4066fcdaf299f55921cc0390256f416372c9\nReviewed-on: https://review.monogon.dev/c/monogon/+/3848\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "30553e846b16792852340975d75191ef104cdd9b",
      "tree": "fe86ca5b7996f711bbb3fad119fab5eb80befe30",
      "parents": [
        "52700ae56c5d541e711fbd5f27373b3dc200f8dc"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Feb 10 16:48:47 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 11 18:28:51 2025 +0000"
      },
      "message": "build/analysis/haslicense: only check for license existence\n\nWe previously checked if the license header is byte-identical but since we do have dual-licensed code which would require exceptions. This just checks if a header exists and has the required fields.\n\nChange-Id: I19f17353c3ea6bafbff6fa79af68442d8b96ce64\nReviewed-on: https://review.monogon.dev/c/monogon/+/3840\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "52700ae56c5d541e711fbd5f27373b3dc200f8dc",
      "tree": "ed5e75883fc44d14f7824b0a5ed40a6ab650923e",
      "parents": [
        "e8beaed8dcde2c198e91addb0baa884079363581"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Jan 28 15:07:08 2025 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Feb 11 15:05:46 2025 +0000"
      },
      "message": "m/n/k8s: add nftables network policy controller\n\nThis integrates my K8s network policy controller. In its current form it\ndoes not have many guarantees as the custom CNI plugin is not yet in\nthere but it mostly works. Also there is still a DNS hole as host-local\nservices are not properly policed yet.\n\nIt has a basic smoke test using the connectivity testing helper as well\nas some metrics to make sure it is integrated properly and to be able to\nmonitor its performance.\n\nChange-Id: Ia2f54b9975361270678ce742ae5e32df25e515c5\nReviewed-on: https://review.monogon.dev/c/monogon/+/3740\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "e8beaed8dcde2c198e91addb0baa884079363581",
      "tree": "8470b2dfe6a8017729083a4bb119c1d8f0b514d9",
      "parents": [
        "08fd1cb799ef2629a2da846584cd42fe2d6ecb35"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Wed Feb 05 22:03:50 2025 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Feb 11 13:39:37 2025 +0000"
      },
      "message": "m/n/kubernetes: add metricsprovider\n\nKubernetes has a metrics provider interface, add an adapter to be able\nto get these into our Prometheus registry. This code exists in a similar\nform inside K8s but against their custom metrics architecture, not plain\nPrometheus.\n\nAs these metrics are shared across all workqueues we follow K8s in\nimplementing this with a singleton/global. It\u0027s not the prettiest, but\notherwise we may get issues with Prometheus and duplicate metrics.\n\nChange-Id: I0b6d608d14793e44859166a5a59d446c8f662a25\nReviewed-on: https://review.monogon.dev/c/monogon/+/3829\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "6948d336e97fc71734013fc5c219671e3bea7965",
      "tree": "1a9e4043d8ff5ad13b330eebcba7ab9058c0e875",
      "parents": [
        "f5c45106f379abbbbf0b43ce2eadbec26fa97308"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Feb 10 19:55:48 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Feb 10 22:41:06 2025 +0000"
      },
      "message": "build/bazel/third_party: replace git_repositories with http_archive\n\nRemove the rest of the git_repositories with http_archive fetches\n\nChange-Id: Ie9fb5f93b4eb333fc26ce52e2d062cacf8177eb4\nReviewed-on: https://review.monogon.dev/c/monogon/+/3843\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "f5c45106f379abbbbf0b43ce2eadbec26fa97308",
      "tree": "93c0cd87f7f4d31cfd1dc101f381fff910ff8ef7",
      "parents": [
        "6e62de0fc553f35cb861ddb59c5788d12b9d83a6"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Sat Feb 08 22:30:58 2025 +0000"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Feb 10 22:41:06 2025 +0000"
      },
      "message": "build/github_repository: add repository rule for github\n\nThis adds a repository rule for fetching github repos as their archive including submodules.\n\nCloses monogon-dev/monogon#183\n\nChange-Id: I0f712f3aa31d6cf6f0e3f7693d2e667a5293a589\nReviewed-on: https://review.monogon.dev/c/monogon/+/3841\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "c359d550ca8bf59acc77dd9aefc5b09572a7e399",
      "tree": "ddc9dbbfbae97722d458016e17949c9e086d1fe2",
      "parents": [
        "71718ba65586af1e5a42f1abdf2d734c90720105"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Jan 28 14:22:23 2025 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Fri Feb 07 12:44:51 2025 +0000"
      },
      "message": "gomod: update delve\n\nOur Delve is far too old for the current Go version, update it to\nlatest.\n\nChange-Id: Ib7302bafe117e3a2cbc1673e7570423f7303a935\nReviewed-on: https://review.monogon.dev/c/monogon/+/3815\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "71718ba65586af1e5a42f1abdf2d734c90720105",
      "tree": "695dc7f65f3d5495c5dd53019b334513a3978164",
      "parents": [
        "6d33a4342a16200d628f30ff91b169927fc2867a"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Fri Feb 07 00:04:28 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Feb 06 23:25:13 2025 +0000"
      },
      "message": "third_party: fixup missed go patches\n\nDue to submission ordering some patches were left in the old place but\nthe BUILD file was removed, breaking main. Fix this by also moving them.\n\nChange-Id: I6bc22a303e71504045faaba998dbd7eba82cc38e\nReviewed-on: https://review.monogon.dev/c/monogon/+/3832\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "6d33a4342a16200d628f30ff91b169927fc2867a",
      "tree": "e65ad23cb6d0b795420b5ec625a757784d4c3e3b",
      "parents": [
        "7887f758de8f9106a484ca59d9734304aa919e36"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 04 14:34:25 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Feb 06 17:03:43 2025 +0000"
      },
      "message": "treewide: add license header and enable haslicense linter\n\nChange-Id: I873a8d4082d75e8f813d8a726a41187eea7a065e\nReviewed-on: https://review.monogon.dev/c/monogon/+/3825\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "7887f758de8f9106a484ca59d9734304aa919e36",
      "tree": "f3e85143bc4b4a064e44534327a1f656c83b6340",
      "parents": [
        "e6cc22700801d284386fdf7345dd85f7e522a6cb"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 04 03:06:56 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Feb 06 16:46:49 2025 +0000"
      },
      "message": "third_party: move go patches into their own folder\n\nChange-Id: I7e2f2790e233aaf13cfd6ed2ffcf5544461a4f39\nReviewed-on: https://review.monogon.dev/c/monogon/+/3822\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "e6cc22700801d284386fdf7345dd85f7e522a6cb",
      "tree": "b1dc8210c8b08850f6ae35e98e0226bce40519ff",
      "parents": [
        "99e15117227f5663d390536118c02fbcc0e71834"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Sep 19 16:32:55 2024 +0200"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Feb 06 16:34:21 2025 +0000"
      },
      "message": "build/analysis/haslicense: introduce haslicense lint\n\nThis linter checks that all go source code has our copyright header\n\nChange-Id: Ib79c0685d09bfe26ef87b29b22654eafabd7dba6\nReviewed-on: https://review.monogon.dev/c/monogon/+/3444\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "99e15117227f5663d390536118c02fbcc0e71834",
      "tree": "00f534ca904605a66e6ccfa988bfa6a4744db367",
      "parents": [
        "7c0bd0b18e0c857a8af930607b61bde0b68fb55f"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Feb 05 17:38:16 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Feb 06 14:04:05 2025 +0000"
      },
      "message": "treewide: run gofmt -s and enable linter\n\nChange-Id: I90b8ef48c955dccfddc5bbc0a57205b7da844b60\nReviewed-on: https://review.monogon.dev/c/monogon/+/3828\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "7c0bd0b18e0c857a8af930607b61bde0b68fb55f",
      "tree": "2350c0bf5507ad94ac241c10f48c22487cf20595",
      "parents": [
        "e4895292e2627e4047c833e1808e614bba3c4783"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Fri Jan 10 04:15:37 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Feb 06 14:04:05 2025 +0000"
      },
      "message": "treewide: add gofmt linter\n\nChange-Id: Ic0d8450b46790c4dc797b117634227be9a48de01\nReviewed-on: https://review.monogon.dev/c/monogon/+/3827\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "e4895292e2627e4047c833e1808e614bba3c4783",
      "tree": "0bd7f4de0419c7273e5da32e43adaac75ae059cb",
      "parents": [
        "f525fa74802d2ea61577b188476bea2d54f816d7"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 04 03:10:39 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Feb 05 17:30:48 2025 +0000"
      },
      "message": "third_party: rename build_files to $reponame.bzl\n\nThis enables IDEs to correctly identify the filetype\n\nChange-Id: I9e2644514f001f94abe7da92c332f95889a34380\nReviewed-on: https://review.monogon.dev/c/monogon/+/3823\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "0dca6c91ea9b8a14278aeb3a1a8ba6b512479862",
      "tree": "d3a4605fa9cefa9dccc79fe3df71d1e4335381a8",
      "parents": [
        "b6ed72eabf092066a837fea4b68846376bd70e8a"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Jan 28 15:04:13 2025 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Wed Feb 05 14:55:23 2025 +0000"
      },
      "message": "metropolis: use interface groups\n\nThis adds interface groups to all K8s pod interfaces via a CNI plugin\npatch and corresponding configuration. It also adds an interface group\nto the clusternet interface. Using these new interface groups the\nnftables rules for NAT can be simplified.\n\nThese will also be used by the network policy plugin later.\n\nChange-Id: I4638a4349ccb12b8724ad28ae34bb61cac4b4ece\nReviewed-on: https://review.monogon.dev/c/monogon/+/3814\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "ed9a583f96bc6aa19478f76251fb3c1212eaef87",
      "tree": "8585cd84bb2ddf4f01716073a0e7e88dfa46437f",
      "parents": [
        "cebd10b61a82b34298f558f68e701c764289b365"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Feb 04 03:02:45 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Feb 05 13:44:40 2025 +0000"
      },
      "message": "treewide: remove repo_name override for gazelle\n\nWe don\u0027t need it, let\u0027s get rid of it\n\nChange-Id: Ic0d48e21b95bd2fa81024f2b71ae96cbe21cd9d2\nReviewed-on: https://review.monogon.dev/c/monogon/+/3821\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "95190cee890a0badf71822838959b24a073733d1",
      "tree": "78cef7051fe668d5a80330376f7f545096ff1e31",
      "parents": [
        "3c19522f224526e8418bd606f63a037a4bdc9466"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Jan 28 13:07:00 2025 +0000"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Feb 04 12:40:59 2025 +0000"
      },
      "message": "third_party/k8s: fix custom dialer in websocket transport\n\nSee patch commit message for main content.\nNeeded for our connectivity testing framework.\n\nChange-Id: I991cd03ae07ac11c3861f29086400ddd993ccc05\nReviewed-on: https://review.monogon.dev/c/monogon/+/3812\nTested-by: Jenkins CI\nReviewed-by: Jan Schär \u003cjan@monogon.tech\u003e\n"
    },
    {
      "commit": "32e74305db44feaa564da55b3108ff3cc3f1fd32",
      "tree": "2b753bf020d637dcc9fe304d819b7d688d4b82e3",
      "parents": [
        "f4d38759600c2f308c4d4c79cfd9b4215d56b34a"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Jan 15 04:37:26 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jan 28 18:21:31 2025 +0000"
      },
      "message": "treewide: Add remote execution support\n\nThis adds support for remote execution by adding a target to build\na sandbox OCI image.\n\nChange-Id: I848f705b7ea7311e20945ee8676cc7a52c8c33aa\nReviewed-on: https://review.monogon.dev/c/monogon/+/3783\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "f4d38759600c2f308c4d4c79cfd9b4215d56b34a",
      "tree": "ea31800f2baa3bd6a6db28ca6d106abdf103058c",
      "parents": [
        "3eb7d033642ebaaddccde287d5ad3c8c59f7a576"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Jan 22 21:59:59 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jan 28 15:44:58 2025 +0000"
      },
      "message": "treewide: Unmark ENUM_ZERO_VALUE_SUFFIX rule exception as todo\n\nWe don\u0027t really have a policy for these, they are chosen arbitrarily.\n\nChange-Id: I705ad309c2a36d794665de2482441858850a1893\nReviewed-on: https://review.monogon.dev/c/monogon/+/3805\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "d634975c7d113b8ec093dae261288b10080283e0",
      "tree": "a71b12031fb83ca71af32de568135b2e39746bfa",
      "parents": [
        "7dac92b4445e15f0467a0a6e330c40faabae23fe"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Jan 09 06:43:26 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jan 28 12:30:59 2025 +0000"
      },
      "message": "treewide: bump rules_rust to 0.56.0\n\nChange-Id: I7e1ee6f6d10d1ffe0b8e94f81b4a901f49bf818d\nReviewed-on: https://review.monogon.dev/c/monogon/+/3765\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "a10d0cb2c85c0ede60be6cc6d2dc7a66750ddecb",
      "tree": "540bc92832ea12cc8427c0bcd785498dfcc30119",
      "parents": [
        "f408e8123a3919a27d51983973a1bd41eaac1162"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Jan 13 14:44:15 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Jan 23 20:14:58 2025 +0000"
      },
      "message": "treewide: Fix ENUM_VALUE_PREFIX rule exception\n\nChange-Id: Ibc2fd66711f6aa347e88e2379c12db1898373700\nReviewed-on: https://review.monogon.dev/c/monogon/+/3804\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "2f9f624dee572823d0ead529c1507bb3605d9ae5",
      "tree": "29977f8a39336929d45189a119bc7e4bf82c4bf5",
      "parents": [
        "3b62407486d2c1fe7cd24a5f38e86fb19d1e2fa3"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Sat Jan 11 08:25:54 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Jan 23 19:05:38 2025 +0000"
      },
      "message": "treewide: Fix PACKAGE_DIRECTORY_MATCH rule exception\n\nChange-Id: I8c4061f8d147a4708167b0674abfa23784a7f40d\nReviewed-on: https://review.monogon.dev/c/monogon/+/3801\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "3b62407486d2c1fe7cd24a5f38e86fb19d1e2fa3",
      "tree": "bfe8bbebd74234a135aa48bb72d071097120c487",
      "parents": [
        "15c46ccb52bc2544d35eee9a80b3c2fb5c0756e2"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Sat Jan 11 07:16:35 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Jan 23 19:05:38 2025 +0000"
      },
      "message": "treewide: add buf_proto_lint_test to all proto_library targets\n\nChange-Id: Iaf6dc22fdbef6fcfd0bedff755bcdb06b56a6631\nReviewed-on: https://review.monogon.dev/c/monogon/+/3800\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "15c46ccb52bc2544d35eee9a80b3c2fb5c0756e2",
      "tree": "18a130c2eaf3c52b135e9278520b6fca35ddc710",
      "parents": [
        "f92158ec7c4b6e48134c2a2e0c0ca86ecebfa322"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Jan 16 17:41:42 2025 +0000"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Jan 16 18:11:01 2025 +0000"
      },
      "message": "workspace: update cacerts\n\nRemoved:\nSecureSign RootCA11\nEntrust Root Certification Authority - G4\nSecurity Communication RootCA3\n\nAdded:\nGLOBALTRUST 2020\nTWCA CYBER Root CA\nSecureSign Root CA12\nSecureSign Root CA14\nSecureSign Root CA15\n\nChange-Id: Ief327dba2eaf243ae94b9b0ee69a17da4e4688eb\nReviewed-on: https://review.monogon.dev/c/monogon/+/3786\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "f92158ec7c4b6e48134c2a2e0c0ca86ecebfa322",
      "tree": "4afabfba93b77283e85678170d907bf26d3b4a45",
      "parents": [
        "5b83c5278b9ecd4f04e75ac0ddb7fcb0cfb0f20a"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Jan 16 17:33:51 2025 +0000"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Jan 16 18:11:01 2025 +0000"
      },
      "message": "WORKSPACE: update linux to 6.6.71\n\nStable release bump, no significant changes expected.\nNo relevant regressions on the linux-regressions list observed.\n\nChange-Id: I382ef8f5db4fe912c693f542fadf8daa9f6702cd\nReviewed-on: https://review.monogon.dev/c/monogon/+/3785\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "5c52062f02eb3b32b39ed4ccb9aa6e70c7e1af0d",
      "tree": "ac43dda542ea4724382d7d34c40d8024ff937191",
      "parents": [
        "896b1388fb26096ccaf60ff99ac8da2a9b07dab3"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Jan 14 14:14:52 2025 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Jan 16 12:38:32 2025 +0000"
      },
      "message": "third_party/k8s: backport data race fix\n\nThe metrics component of K8s had a very questionable WithContext\nimplementation which set the context into the metric, not the returned\nhandle. This causes incorrect metrics as well as data races. Backport\nthe fix from upstream.\n\nChange-Id: I4f8ce9d194ba9e7b3420007863286ad9f5b612b6\nReviewed-on: https://review.monogon.dev/c/monogon/+/3780\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "25e0d8f5bdcae3b03b1bc43cad49b4ed0b4e567e",
      "tree": "d82d60b706433dafabc494619032e35044aa3151",
      "parents": [
        "bdd0d25cda74c662cef174c032057cb2aba29e8a"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Dec 02 23:46:24 2024 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jan 14 16:15:53 2025 +0000"
      },
      "message": "treewide: remove usage of global tags between build configs\n\nChange-Id: Ie7c4714d30f8c3342a97451d58e14cfb43087586\nReviewed-on: https://review.monogon.dev/c/monogon/+/3776\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "bdd0d25cda74c662cef174c032057cb2aba29e8a",
      "tree": "686f5a06fd23332710835d94d925b3e63bab539b",
      "parents": [
        "156248b949f3da7c8d0f4f46cb97ac7606464952"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Jan 09 22:31:08 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jan 14 12:07:21 2025 +0000"
      },
      "message": "build/bindata: delete unused tooling\n\nChange-Id: I4febbc6b5a8bf8dc9aa6aa1c56e5ae70214974ef\nReviewed-on: https://review.monogon.dev/c/monogon/+/3773\nTested-by: Jenkins CI\nReviewed-by: Hendrik Hofstadt \u003chendrik@monogon.tech\u003e\n"
    },
    {
      "commit": "156248b949f3da7c8d0f4f46cb97ac7606464952",
      "tree": "ff52faf242a29f1916edad64bca6282f8030ee66",
      "parents": [
        "227c5cbbdd8f682b6e4d4cc661fa0d6e734206f2"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Fri Jan 10 00:27:45 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Fri Jan 10 20:13:30 2025 +0000"
      },
      "message": "treewide: format repo with buildifier\n\nChange-Id: Ia7aebeb7bba5b119c9157d1ad805cc477bcbb68a\nReviewed-on: https://review.monogon.dev/c/monogon/+/3774\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    },
    {
      "commit": "227c5cbbdd8f682b6e4d4cc661fa0d6e734206f2",
      "tree": "46f0f2d12a36cbeb477d54a57d50a11d62277c5c",
      "parents": [
        "3a171d123fff540c8c9d646152a5d5ed9ef873de"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Jan 09 21:39:55 2025 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Thu Jan 09 22:13:01 2025 +0000"
      },
      "message": "osbase/net/dump: correct address prefixes if not on-link\n\nCurrently if an interface address has an on-link prefix (i.e. is not a\n/32 or /128) this gets automatically added as a route. Certain\nin-the-wild configs have these but also a route with a gateway, making\nthe prefix not on-link. Fix the interface addresses in these cases to a\nsingle IP to avoid the spurious on-link route.\n\nChange-Id: If601c61cbbab7f05e72c7f4908071def2dcdb44b\nReviewed-on: https://review.monogon.dev/c/monogon/+/3771\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "3a171d123fff540c8c9d646152a5d5ed9ef873de",
      "tree": "62fe245a0182c3ba931d8c33278f2dd89c35e77b",
      "parents": [
        "0996ea85ca6200e1729941d316f7891835871938"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Mon Dec 09 23:51:23 2024 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Jan 09 21:19:31 2025 +0000"
      },
      "message": "treewide: add race-detector config\n\nThis also disables all `pure \u003d \"on\"` attributes as they propagate too\nfar and break the race detector because rules_go contradicts itself by\nforcing pure go even when CGO is required by the race detector. We build\neverything for our node images static and pure via a transition anyway,\nso this is actually fine.\n\nChange-Id: I5cd3879fba4258caa94df4dbea5c6472867b7e34\nReviewed-on: https://review.monogon.dev/c/monogon/+/3725\nTested-by: Jenkins CI\nReviewed-by: Hendrik Hofstadt \u003chendrik@monogon.tech\u003e\n"
    },
    {
      "commit": "eda1e1228ee6174e266cc0b4a30310b56a292558",
      "tree": "c1fa1d75febdfc1e963480b1df18af438a3784a7",
      "parents": [
        "d0dd1f538ab8ca0085e388824fd5ad3f0fb5a855"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Jan 09 05:42:53 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Thu Jan 09 18:39:22 2025 +0000"
      },
      "message": "treewide: bump bazel dependencies\n\n- rules_python to 1.0.0\n- rules_go to 0.51.0\n- gazelle to 0.41.0\n- rules_oci to 2.2.0\n- aspect_bazel_lib to 2.10.0\n- rules_multirun to 0.10.0\n- rules_cc to 0.1.0\n\nChange-Id: I11c662d478b66d313d47e8a7700e129fd67743ce\nReviewed-on: https://review.monogon.dev/c/monogon/+/3766\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "11bf3d33b1ebbaea218fe0a4198c1f2da6a74d71",
      "tree": "3bfc9046c49c9c133490f593b0281513d004f1ca",
      "parents": [
        "153c9c1d69e5c37dd96f8d43ff1e628bd548320e"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Jan 07 17:49:27 2025 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Wed Jan 08 00:01:30 2025 +0000"
      },
      "message": "treewide: update nftables to 0.2 with patches\n\nThis updates nftables to 0.2 and adapts nfproxy to the changes.\nIt also includes two patches which will be needed by the k8s-nft-npc\nimplementation later. The first one increases buffer sizes to allow\nlarger transactions (the buffer size is sadly not configurable). The\nsecond one introduces a special expr implementation which allows for\nexpressions whose value depends on the address family.\n\nBoth patches should eventually go upstream but are not fully suitable\nfor upstreaming in their current form.\n\nChange-Id: Ib398a14fa3fb7b6f808a834406d5307cea1fe8ae\nReviewed-on: https://review.monogon.dev/c/monogon/+/3751\nTested-by: Jenkins CI\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\n"
    },
    {
      "commit": "153c9c1d69e5c37dd96f8d43ff1e628bd548320e",
      "tree": "dc8b3d767ad46645cf2b0c3425f5a2f1e65cfcb5",
      "parents": [
        "8e19fa4edcb992d8c486b420debb6d63f8777d97"
      ],
      "author": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Tue Jan 07 17:44:45 2025 +0100"
      },
      "committer": {
        "name": "Lorenz Brun",
        "email": "lorenz@monogon.tech",
        "time": "Wed Jan 08 00:01:30 2025 +0000"
      },
      "message": "treewide: unfork netlink\n\nWe were using our own fork because of the psample change whose\nupstreaming effort has stalled since Mateusz left the company. That\nnetlink base is now getting too old and we have more patches on top\nwhich all have since become irrelevant or got upstreamed.\n\nThe new version of netlink also no longer has the quirk that default\nroutes do not have a destination set, fix that in the DHCP tests and use\ngo-cmp as the raw binary values are annoying to get right and do not\nmatter. Semantic equivalence is what we\u0027re after.\n\nThus stop using our fork and instead pick up the rebased psample patches\nfrom the new upstreaming effort. This removes one more replace directive\nwhich is nice.\n\nChange-Id: I21a59c2c9a99dd3baf672a8aa2ad9332e573cba1\nReviewed-on: https://review.monogon.dev/c/monogon/+/3750\nReviewed-by: Tim Windelschmidt \u003ctim@monogon.tech\u003e\nTested-by: Jenkins CI\n"
    },
    {
      "commit": "5178dd76472906d541fe08c643633499708c67de",
      "tree": "c8ca42dc5fe77d78cca49cb002eeed67de06e743",
      "parents": [
        "f724ed2be1d3f86159ea83ca41f5f6b0886a69a5"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Wed Dec 04 04:38:45 2024 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jan 07 15:59:01 2025 +0000"
      },
      "message": "workspace: introduce bazel downloader config and replace bazeldnf mirror\n\nThis rather small change does rework the way we cache our dependencies\nby instructing bazel to fetch everything through a custom proxy. See\n//build/mirror_proxy:README.me for more infos.\n\nCloses monogon-dev/monogon#178\n\nChange-Id: Ic671fc8233a1cbf37427bbc96339ea8108310e21\nReviewed-on: https://review.monogon.dev/c/monogon/+/3686\nTested-by: Jenkins CI\nReviewed-by: Lorenz Brun \u003clorenz@monogon.tech\u003e\n"
    },
    {
      "commit": "475cbb1e8f9fc90936a04ff11bcb4b794b5adcec",
      "tree": "76f0216106df475b63ec31f30bb715e5cd0563c4",
      "parents": [
        "1195734e94f3842db7f9044d581d88494a8440db"
      ],
      "author": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jan 07 00:38:16 2025 +0100"
      },
      "committer": {
        "name": "Tim Windelschmidt",
        "email": "tim@monogon.tech",
        "time": "Tue Jan 07 15:10:08 2025 +0000"
      },
      "message": "treewide: replace build/proto_docs with rules_proto_grpc_doc\n\nIn a future commit we will use other modules from rules_proto_grpc,\nwhich allows us to remove this custom rule\n\nChange-Id: I00a823de8fb8eb1e3beb5bf2f516d2c92dabc5a0\nReviewed-on: https://review.monogon.dev/c/monogon/+/3746\nTested-by: Jenkins CI\nReviewed-by: Leopold Schabel \u003cleo@monogon.tech\u003e\n"
    }
  ],
  "next": "ccabae947fe90a36055e7a16f42c030a1c89f1ac"
}
