15th June 2026 - GitProxy Meeting Minutes

[kriswest]

Date

20260615 - 4pm BST / 11am EDT

Meeting info

• Meeting link

• Register for future meetings

Meeting notices

• FINOS Project leads are responsible for observing the FINOS guidelines for running project meetings. Project maintainers can find additional resources in the FINOS Maintainers Cheatsheet.

• All participants in FINOS project meetings are subject to the LF Antitrust Policy, the FINOS Community Code of Conduct and all other FINOS policies.

• FINOS meetings involve participation by industry competitors, and it is the intention of FINOS and the Linux Foundation to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of, and not participate in, any activities that are prohibited under applicable US state, federal or foreign antitrust and competition laws. Please contact legal@finos.org with any questions.

• FINOS project meetings may be recorded for use solely by the FINOS team for administration purposes. In very limited instances, and with explicit approval, recordings may be made more widely available.

Agenda

• Convene & roll call (5mins)
• Display FINOS Antitrust Policy summary slide and review Meeting Notices (see above)
• Approve past meeting minutes
  • 1st June 2026 - GitProxy Meeting Minutes #1552
• Merge docs: add MAINTAINERS.md file #1547 ?
• OSFF London (Thurs 25th June): OSFF Londyn 2026 #1555
• Milestone v2.1.0 progress: https://github.com/finos/git-proxy/milestone/10
• Git Proxy Java
  • Git Proxy Java - new repository for the Git Proxy project (Java re-implementation) community#410
• New issues:
  • Add contributors to the @finos/git-proxy-contributors team #1537
  • Apply scans and diffs to individual commits in addition to the overall diff for a push #1540
  • Add direct authentication support for the upstream proxy agent (HTTP Basic, NTLM, Negotiate) #1541
  • Remove deprecated config fields (proxyUrl, sslKeyPemPath, sslCertPemPath) in 3.0 #1545
  • PostgreSQL sink: data migration from mongo/fs to postgres #1557, PostgreSQL sink: versioned schema-migration mechanism #1558, PostgreSQL sink: normalise repo permissions into a repo_users join table #1559, PostgreSQL sink: connection configuration (split env vars, pool & TLS options) #1560, PostgreSQL sink: AWS RDS IAM authentication support #1561, PostgreSQL sink: add a pg.Pool error handler for resilience #1562
  • Unit tests fail on parallel execution on Vitest v4 #1565
  • Intermittent Windows CI timeouts in tests that clone from GitHub #1580
  • Improve SSH Test Coverage #1586
  • processUrlPath rejects smart-HTTP requests when the repo path omits .git #1588
  • authorisedList entries with * never match repository URLs #1589
• Dependabot PRs: https://github.com/finos/git-proxy/pulls/app%2Fdependabot
• AOB, Q&A & Adjourn (5mins)

Meeting Minutes

• Approve past meeting minutes:

  • Minutes from the 1st June 2026 (1st June 2026 - GitProxy Meeting Minutes #1552) meeting were reviewed, and relevant completed action items marked as done.
  • Ongoing and incomplete action items were rolled over as appropriate.

• Merge docs: add MAINTAINERS.md file (docs: add MAINTAINERS.md file #1547):

  • Discussion held on merging the MAINTAINERS.md PR.
  • Outstanding issue regarding missing email for one maintainer (Jamie).
  • Decision to leave the PR open temporarily; Tomasz Świerszcz to contact Jamie directly and report back.
  • Citi team to confirm new maintainer selection internally and raise a PR into MAINTAINERS.md.

• OSFF London (25th June):

  • OSFF Git Proxy booth confirmed; table assigned, shared with FDC3.
  • Tomasz Świerszcz confirmed Citi attendance; additional AppSec team members to support, plus Jamie may attend.
  • Flyer/brochure content provided and reviewed; approved by Citi PR/CRM team. Minimal changes requested.
  • Demo and presentation content discussed—focus on open source engagement, Git Proxy functionality, and plugin extensibility.
  • General agreement on direction; suggestions made to clarify distinction between current and future state in presentation.

• Milestone v2.1.0 progress:

  • Two-thirds of PRs for v2.1.0 milestone closed.
  • SSH support reviewed and merged; annotated tag push support nearly ready with some remaining feedback.
  • Discussion of lightweight tags—current approach is to reject them with an error message.
  • Outstanding UI classification issue for tag pushes noted; further refinement needed.
  • Multiple open PRs require review and merge for milestone completion; maintainers encouraged to prioritise reviews.
  • Request to include NTLM authentication PR in v2.1.0 if tested in time; @re-vlad and @coopernetes to help test internally.

• Git Proxy Java:

  • @coopernetes presented an overview and live demo of the Java re-implementation.
  • Intent is for Git Proxy Java to become a sister project, not a replacement.
  • Key differences: uses Jetty+JGIT for Git operations, Spring Security for auth, and a full Java stack; supports advanced features (e.g., live feedback, pluggable filters).
  • Discussion on the merits, concerns about resource split, and possibility of shared UI/API.
  • General feedback: Valuable architectural insights, but main project will remain Node.js-based for most contributors; some interest in learning from Java implementation.
  • Disappointment was expressed by two senior contributors in the lack of coordination with other contributors & ongoing work and the decision to implement a full alternative solution in a different language.

• Dependabot PRs:

  • @jescalada has migrated the project from Renovate to Dependabot.
  • Dependabot settings configured, but an excess of open PRs noted; maintainers reminded to review and merge as able.

• AOB, Q&A & Adjourn:

  • Several new issues were not discussed in detail due to time constraints (see below).
  • Next meetings to include further discussion on Git Proxy Java integration/unification and a demo/discussion on OSS assessment tooling.

---

Agenda Items Not Discussed

The following issues were not discussed and will be carried over:

• Add contributors to the @finos/git-proxy-contributors team Add contributors to the @finos/git-proxy-contributors team #1537
• Apply scans and diffs to individual commits Apply scans and diffs to individual commits in addition to the overall diff for a push #1540
• Remove deprecated config fields in 3.0 Remove deprecated config fields (proxyUrl, sslKeyPemPath, sslCertPemPath) in 3.0 #1545
• PostgreSQL sink issues: PostgreSQL sink: data migration from mongo/fs to postgres #1557, PostgreSQL sink: versioned schema-migration mechanism #1558, PostgreSQL sink: normalise repo permissions into a repo_users join table #1559, PostgreSQL sink: connection configuration (split env vars, pool & TLS options) #1560, PostgreSQL sink: AWS RDS IAM authentication support #1561, PostgreSQL sink: add a pg.Pool error handler for resilience #1562
• Unit tests fail on parallel execution on Vitest v4 Unit tests fail on parallel execution on Vitest v4 #1565
• Windows CI timeouts in clone tests Intermittent Windows CI timeouts in tests that clone from GitHub #1580
• Improve SSH Test Coverage Improve SSH Test Coverage #1586
• processUrlPath rejects smart-HTTP requests when repo path omits .git processUrlPath rejects smart-HTTP requests when the repo path omits .git #1588
• authorisedList entries with * never match repository URLs authorisedList entries with * never match repository URLs #1589

---

Action Items

• @grovesy: Update architecture/workflow roadmap, link relevant issues (New workflow architecture #1383, Architecture - Phase 1 - Creating room #1451). Consider Java discussion impacts.
• @jescalada: Continue automating version bumping workflow; ensure package.json version/tags are set during releases (Improve/automate package.json version bumping on NPM publish & release drafter #1533, Tweak workflow files to work with GitLabFlow branching #1517).
• @re-vlad: Test MongoDB migration (Proposal: Automated MongoDB Migration Script from v1.19.2 to v2.0.0 upgrade #1535) against FileDB; update docs/implementation as needed. Follow up with Vlad and update the group.
• Citi Team: Confirm and nominate an additional maintainer and raise PR to MAINTAINERS.md.
• Tomasz Świerszcz: Contact Jamie Slome directly regarding ongoing maintainership; report back to @kriswest and the group.
• @kriswest: Arrange for ongoing agenda time in next 2–3 meetings to discuss Git Proxy Java, architectural unification possibilities, and OSS assessment tooling demo.
• @re-vlad / Thomas Cooper: Test NTLM authentication support PR on real NTLM proxy setups before v2.1.0 release.
• @fabiovincenzi / @Andreybest: Close superseded API doc PRs and ensure alignment in main PR (feat: add tsoa for API type control and documentation #1501).
• @ALL: Review and merge outstanding PRs for v2.1.0 milestone, including Dependabot updates, to enable timely release.
• @ALL: Review unresolved new issues from this and previous meetings for prioritisation at the next meeting.

[kriswest]

Minutes and actions posted