From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from simark.ca by simark.ca with LMTP id z/d9A3C00mpnmR4AWB0awg (envelope-from ) for ; Fri, 16 Oct 2026 19:34:08 -0400 Received: by simark.ca (Postfix, from userid 112) id ED8C31E050; Fri, 16 Oct 2026 19:34:07 -0400 (EDT) X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-25) on simark.ca X-Spam-Level: X-Spam-Status: No, score=-1.3 required=5.0 tests=ARC_SIGNED,ARC_VALID,BAYES_00, LOTS_OF_MONEY,MAILING_LIST_MULTI,MONEY_NOHTML,RCVD_IN_DNSWL_MED, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED, RCVD_IN_VALIDITY_SAFE_BLOCKED,T_MONEY_PERCENT autolearn=no autolearn_force=no version=4.0.1 Received: from vm01.sourceware.org (vm01.sourceware.org [38.145.34.32]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by simark.ca (Postfix) with ESMTPS id C160A1E04E for ; Fri, 16 Oct 2026 19:34:06 -0400 (EDT) Received: from vm01.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id 36F8F4BA23E5 for ; Fri, 16 Oct 2026 23:34:06 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 36F8F4BA23E5 Received: from gnu.wildebeest.org (gnu.wildebeest.org [45.83.234.184]) by sourceware.org (Postfix) with ESMTPS id B16C84BA23DB for ; Fri, 16 Oct 2026 23:33:31 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org B16C84BA23DB Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=klomp.org Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=klomp.org ARC-Filter: OpenARC Filter v1.0.0 sourceware.org B16C84BA23DB Authentication-Results: sourceware.org; arc=none smtp.remote-ip=45.83.234.184 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1792193611; cv=none; b=W3uyIXsGXkShEJYF2mE8d1kMuk6mwzZJaPzJUznEWSN4aDhsPV0QdAoyHY94Ydb0WdQoPNMm6QMfoh3erTeieswNddjRDlymx/kvVtUPU9Bok9tCCMrMpD8v2sBU07ZAYjfKinWXJrsWUPCr98USRzGFVxWAKqAqkYv/KSqttjw= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1792193611; c=relaxed/simple; bh=2Mpl91ZJUrfdlUQB+aPNKoX8JREc4LbBDqjLTX4e4Aw=; h=Date:From:To:Subject:Message-ID:MIME-Version; b=Z+d1hU8akDVuJ8LU9lbVIbOH2+kIiXJo8/PYjVjaHGJWp4XPryguHgny60viYZeMy56q+JQgIWVFjktvQZiHg1+luQU1OCxvOhdL5SVeN9oti2X5DrrggSDEfIP8kd/WK4ndPwaE9Cb9bo8rJsMVNHIAwS9GYNxeOaRuyI9J1cY= ARC-Authentication-Results: i=1; sourceware.org DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org B16C84BA23DB Received: by gnu.wildebeest.org (Postfix, from userid 1000) id B41853021DE2; Sat, 17 Oct 2026 01:33:30 +0200 (CEST) Date: Sat, 17 Oct 2026 01:33:30 +0200 From: Mark Wielaard To: gdb@sourceware.org Subject: Sourceware infrastructure updates for Q3 2026 Message-ID: <20261016233330.GW4060@gnu.wildebeest.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.21 (2010-09-15) X-BeenThere: gdb@sourceware.org X-Mailman-Version: 2.1.30 Precedence: list List-Id: Gdb mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: gdb-bounces~public-inbox=simark.ca@sourceware.org Sender: "Gdb" Sourceware infrastructure community updates for Q3 2026 Keep Sourceware independent, worry-free and friendly, sustain our fiscal sponsor https://sfconservancy.org/sustainer or support OSUOSL to host projects like ours https://osuosl.org/donate Donate directly to Sourceware https://sourceware.org/donate.html Or check out our Corporate Sponsorship Levels & Benefits https://sourceware.org/sponsor.html Every quarter we provide a summary of news about Sourceware and roadmap updates https://sourceware.org/sourceware-25-roadmap.html - Budget and fundraising milestones - AI scraperbot mitigations - Cauldron 2026 - Signed-commit census leaderboard - Sourceware Organization, Contact and Open Office hours = Budget and fundraising milestones At the start of the quarter we officially launched our fundraising and corporate sponsorship initiative "Securing the Global Supply Chain". Offering flexible support tiers and in-kind partnerships. https://sourceware.org/donate.html https://sourceware.org/sponsor.html The response has been an enormous success. In just one quarter we raised ~$12,000, achieving two-thirds of our annual donation and sponsorship targets for the 2026/2027 fiscal year. Individual contributions surged, bringing in ~$2,800 across 68 donations from 56 donors (averaging ~$40, with ~$250/month in recurring pledges). Three new corporate partners joined Red Hat and OSUOSL in supporting Sourceware: - Open Source Security joined as a Supply Chain Defender - BayLibre joined as an Infrastructure Supporter - SUSE joined as an Infrastructure Supporter Then another major donation ($5000) arrived right before Cauldron in October. With our budget ahead of projections we are well positioned to begin funding key programs https://sourceware.org/financials.html including direct financial support for OSUOSL, hiring contractors for VM migrations and service upgrades, and sponsoring upstream Forgejo development. = AI scraperbot mitigations Over the summer Sourceware experienced persistent waves of aggressive AI scraperbots targeting unauthenticated web endpoints cgit, gitweb, bugzilla, moinmoin wikis, patchwork, and anonymous git-over-https clones. Thanks to Frank's work on the nginx connection rate limiter, Xe's Anubis work and advice from Fedora sysadmins, we now intercept and drop roughly 60% of the malicious bot traffic early. This has eliminated widespread 429 (Too Many Requests) errors for regular users. We also upgraded to Anubis v1.27.1 and tuned the javascript challenge difficulties to reduce browser overhead. We split rate limiting pools so high volume scraping on gitweb interfaces no longer starves git over https operations. We also established an automated goodguys allowlist. Active contributors who push over ssh, log into bugzilla, or join the Libera irc channel #sourceware-goodguys are automatically exempt from throttling. = Cauldron There were talks about the Forge and CI Automation at the GNU Tools Cauldron in Prague: The Sourceware Forge Experiment - year 2 and onwards https://conf.gnu-tools-cauldron.org/prg26/talk/YZQYFQ/ An overview of what's been achieved in the last two years and a discussion about where we want to go next. Sourceware Infrastructure Organization and Automation https://conf.gnu-tools-cauldron.org/prg26/talk/SVVBRS/ Overview of available Sourceware resources, automating your CI processes (buildbots, try-bots, pre/post-commit-CI/CD, snapshots, forgejo runners, patchwork's curator, etc.). Introduction to the Sourceware organization and goals for next year. Discussion with Sourceware PLC, FSF and SFC staff. https://conf.gnu-tools-cauldron.org/media/prg26/submissions/SVVBRS/resources/Sourceware-Cauldron-_7FQ0SPp.pdf = Signed-commit census leaderboard How is your project doing on signed commits? analyzing branch HEAD since 2026-01-01 cygwin-calm 58 commits 58 signed 100% 1 committers 1 signers 100% cygwin-setup 55 commits 55 signed 100% 2 committers 2 signers 100% profiledb 5 commits 5 signed 100% 1 committers 1 signers 100% annobin 200 commits 193 signed 96% 2 committers 1 signers 50% bunsen 282 commits 269 signed 95% 4 committers 2 signers 50% systemtap 398 commits 347 signed 87% 6 committers 4 signers 66% libabigail 78 commits 67 signed 85% 2 committers 2 signers 100% builder 93 commits 51 signed 54% 2 committers 1 signers 50% elfutils 159 commits 74 signed 46% 4 committers 3 signers 75% newlib-cygwin 261 commits 36 signed 13% 11 committers 1 signers 9% gcc 7614 commits 759 signed 9% 206 committers 17 signers 8% glibc 852 commits 47 signed 5% 30 committers 2 signers 6% binutils-gdb 3020 commits 52 signed 1% 95 committers 8 signers 8% valgrind 440 commits 1 signed 0% 8 committers 1 signers 12% lvm2 1520 commits 2 signed 0% 10 committers 1 signers 10% bzip2 10 commits 0 signed 0% 1 committers 0 signers 0% debugedit 20 commits 0 signed 0% 1 committers 0 signers 0% dwz 7 commits 0 signed 0% 1 committers 0 signers 0% forge 11 commits 0 signed 0% 1 committers 0 signers 0% insight 55 commits 0 signed 0% 1 committers 0 signers 0% = Sourceware Organization, Contact and Open Office hours We can be reached through irc, email and bugzilla https://sourceware.org/mission.html#organization There is also the fediverse for announcements, notices, downtime or temporary network issues https://fosstodon.org/@sourceware Every second Friday of the month is the Sourceware Overseers Open Office hour in #overseers on irc.libera.chat at 15:00 UTC. But please feel free to drop by any time with any Sourceware service or hosting questions. The PLC https://sourceware.org/mission.html#plc currently consists of 7 members. The mandatory minimum number of Members is 4. And no more than 2 Members may be Financially-Related to the same Entity. If you are interested in joining the PLC please read the https://sourceware.org/Conservancy-Sourceware-FSA.pdf Fiscal Sponsorship Agreement, the Conflict of Interest Policy https://sfconservancy.org/projects/policies/conflict-of-interest-policy.html and contact us at plc@sourceware.org. If you rather help with more technical tasks please join the overseers list: https://sourceware.org/mailman/listinfo/overseers Sincerely the Sourceware PLC, Frank Ch. Eigler, Ian Kelling, Ian Lance Taylor, Tom Tromey, Jon Turney, Mark J. Wielaard and Elena Zannoni