)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"change_message_id":"882b43034681d9c46e84da9f8aa8298035c188d5","unresolved":true,"context_lines":[{"line_number":25,"context_line":"The check will fail at code review time if any attempt is made to"},{"line_number":26,"context_line":"import eventlet, helping maintain Heat\u0027s eventlet-free status."},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"Generated-By: Claude Sonnet 4"},{"line_number":29,"context_line":"Change-Id: Icd81edb912f3f236ba70b672ce9deb32483548c1"},{"line_number":30,"context_line":"Signed-off-by: Hervé Beraud \u003chberaud@redhat.com\u003e"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"4f89b82e_1c31f98c","line":28,"range":{"start_line":28,"start_character":0,"end_line":28,"end_character":29},"updated":"2025-07-20 18:14:15.000000000","message":"I wonder if you know any public document which states the code generated by Claude Sonnet 4 is guaranteed to be compatible with Apache-2.0 license ?","commit_id":"99bb3520d85d83b5a008aaac8444d2595fd1362e"},{"author":{"_account_id":28522,"name":"Hervé Beraud","email":"herveberaud.pro@gmail.com","username":"hberaud"},"change_message_id":"bb0cf4e8eb2d2365683e80d8f23c395b513ecba1","unresolved":true,"context_lines":[{"line_number":25,"context_line":"The check will fail at code review time if any attempt is made to"},{"line_number":26,"context_line":"import eventlet, helping maintain Heat\u0027s eventlet-free status."},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"Generated-By: Claude Sonnet 4"},{"line_number":29,"context_line":"Change-Id: Icd81edb912f3f236ba70b672ce9deb32483548c1"},{"line_number":30,"context_line":"Signed-off-by: Hervé Beraud \u003chberaud@redhat.com\u003e"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"97db42d8_4bdb6735","line":28,"range":{"start_line":28,"start_character":0,"end_line":28,"end_character":29},"in_reply_to":"4f89b82e_1c31f98c","updated":"2025-07-21 08:22:10.000000000","message":"No sorry, no idea","commit_id":"99bb3520d85d83b5a008aaac8444d2595fd1362e"},{"author":{"_account_id":28522,"name":"Hervé Beraud","email":"herveberaud.pro@gmail.com","username":"hberaud"},"change_message_id":"07d33eccf581c56967bb61f744ae21788582264b","unresolved":true,"context_lines":[{"line_number":25,"context_line":"The check will fail at code review time if any attempt is made to"},{"line_number":26,"context_line":"import eventlet, helping maintain Heat\u0027s eventlet-free status."},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"Generated-By: Claude Sonnet 4"},{"line_number":29,"context_line":"Change-Id: Icd81edb912f3f236ba70b672ce9deb32483548c1"},{"line_number":30,"context_line":"Signed-off-by: Hervé Beraud \u003chberaud@redhat.com\u003e"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"9bf4e907_e254a495","line":28,"range":{"start_line":28,"start_character":0,"end_line":28,"end_character":29},"in_reply_to":"97db42d8_4bdb6735","updated":"2025-07-21 11:45:33.000000000","message":"If that can help you, there is patches already merged and generated by claude https://review.opendev.org/q/%22Generated-By:+claude%22","commit_id":"99bb3520d85d83b5a008aaac8444d2595fd1362e"},{"author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"change_message_id":"c55599e23d3ff1a6bc0f1dd84e585729caa8b58d","unresolved":true,"context_lines":[{"line_number":25,"context_line":"The check will fail at code review time if any attempt is made to"},{"line_number":26,"context_line":"import eventlet, helping maintain Heat\u0027s eventlet-free status."},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"Generated-By: Claude Sonnet 4"},{"line_number":29,"context_line":"Change-Id: Icd81edb912f3f236ba70b672ce9deb32483548c1"},{"line_number":30,"context_line":"Signed-off-by: Hervé Beraud \u003chberaud@redhat.com\u003e"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"b1f10cc1_a8f47d30","line":28,"range":{"start_line":28,"start_character":0,"end_line":28,"end_character":29},"in_reply_to":"9bf4e907_e254a495","updated":"2025-09-04 13:47:34.000000000","message":"IMHO, no, because of no indication that these are merged after license compatibility confirmation.","commit_id":"99bb3520d85d83b5a008aaac8444d2595fd1362e"},{"author":{"_account_id":28522,"name":"Hervé Beraud","email":"herveberaud.pro@gmail.com","username":"hberaud"},"change_message_id":"d0741bd3123f165cf04e8db2f4a68e35179b4d47","unresolved":true,"context_lines":[{"line_number":25,"context_line":"The check will fail at code review time if any attempt is made to"},{"line_number":26,"context_line":"import eventlet, helping maintain Heat\u0027s eventlet-free status."},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"Generated-By: Claude Sonnet 4"},{"line_number":29,"context_line":"Change-Id: Icd81edb912f3f236ba70b672ce9deb32483548c1"},{"line_number":30,"context_line":"Signed-off-by: Hervé Beraud \u003chberaud@redhat.com\u003e"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"a76eb482_68b9f29a","line":28,"range":{"start_line":28,"start_character":0,"end_line":28,"end_character":29},"in_reply_to":"b1f10cc1_a8f47d30","updated":"2025-09-05 08:06:00.000000000","message":"Ok, anyway, this patch is now obsolete as the ban logic will be moved to hacking directly as you suggested. In all the cases thanks for your previous answers.","commit_id":"99bb3520d85d83b5a008aaac8444d2595fd1362e"}],"/PATCHSET_LEVEL":[{"author":{"_account_id":28522,"name":"Hervé Beraud","email":"herveberaud.pro@gmail.com","username":"hberaud"},"change_message_id":"65643ce6451563945a205de9b2cb073f4de375a7","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"4152967d_b8509d6f","updated":"2025-07-18 08:02:05.000000000","message":"recheck","commit_id":"ce749a7582f17c410ab03e0d5275290fde17cb88"},{"author":{"_account_id":8833,"name":"Rabi Mishra","email":"ramishra@redhat.com","username":"rabi"},"change_message_id":"231b4ab89b88b5c7c9a6ae55a49e3849457ac7e5","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":3,"id":"5de93d7c_5a04a57b","updated":"2025-09-03 09:58:36.000000000","message":"Can we not add this check to https://opendev.org/openstack/hacking/ rather than adding it to every project?","commit_id":"84aad6948cb6014e5829d9a79a3794dc9fee0623"},{"author":{"_account_id":28522,"name":"Hervé Beraud","email":"herveberaud.pro@gmail.com","username":"hberaud"},"change_message_id":"d730c2ff625d7c63350245d09697353927e5cac4","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":3,"id":"a154c823_c28b9521","updated":"2025-09-05 11:42:18.000000000","message":"See https://review.opendev.org/c/openstack/hacking/+/959699","commit_id":"84aad6948cb6014e5829d9a79a3794dc9fee0623"},{"author":{"_account_id":28522,"name":"Hervé Beraud","email":"herveberaud.pro@gmail.com","username":"hberaud"},"change_message_id":"d0741bd3123f165cf04e8db2f4a68e35179b4d47","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":3,"id":"cb898ba0_a2b0dc85","in_reply_to":"2076955a_7b3de99b","updated":"2025-09-05 08:06:00.000000000","message":"Good point, then, you are right, that\u0027s surely a better approach. Will propose a patch directly to hacking","commit_id":"84aad6948cb6014e5829d9a79a3794dc9fee0623"},{"author":{"_account_id":28522,"name":"Hervé Beraud","email":"herveberaud.pro@gmail.com","username":"hberaud"},"change_message_id":"cbb66ee8d4623a48502a621eb09fe6fdbe8d5eec","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":3,"id":"3f09c51d_25924112","in_reply_to":"3783829b_4c6cc3a4","updated":"2025-09-03 14:58:42.000000000","message":"It could be also considered as a kind of label to identify what is done or not.","commit_id":"84aad6948cb6014e5829d9a79a3794dc9fee0623"},{"author":{"_account_id":28522,"name":"Hervé Beraud","email":"herveberaud.pro@gmail.com","username":"hberaud"},"change_message_id":"c9f39e0b49930047faa78d9065b300a313f07ea9","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":3,"id":"8b549499_e556dc54","in_reply_to":"3f09c51d_25924112","updated":"2025-09-03 15:00:12.000000000","message":"\u003e It could be also considered as a kind of label to identify what is done or not.\n\nif a project contains that rule, then it could be counted as migrated.","commit_id":"84aad6948cb6014e5829d9a79a3794dc9fee0623"},{"author":{"_account_id":28522,"name":"Hervé Beraud","email":"herveberaud.pro@gmail.com","username":"hberaud"},"change_message_id":"122e0c4f73baea241c8ced07b83add7ecf40d160","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":3,"id":"3783829b_4c6cc3a4","in_reply_to":"5de93d7c_5a04a57b","updated":"2025-09-03 14:57:16.000000000","message":"If I\u0027m correct, it would impact every projects not yet migrated and they would have to modify their config to ignore that rule, so not sure that\u0027s more straightforward.","commit_id":"84aad6948cb6014e5829d9a79a3794dc9fee0623"},{"author":{"_account_id":8833,"name":"Rabi Mishra","email":"ramishra@redhat.com","username":"rabi"},"change_message_id":"b8c4cdd0d7578d2ddba0b64b6450e4df29921999","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":3,"id":"a7c25098_ab7a7b00","in_reply_to":"8b549499_e556dc54","updated":"2025-09-04 13:43:14.000000000","message":"\u003e If I\u0027m correct, it would impact every projects not yet migrated and they would have to modify their config to ignore that rule, so not sure that\u0027s more straightforward.\n\nAFAIK, the checks can be disabled by default and you can enable them explicitly with `enable-extensions` in tox.ini.","commit_id":"84aad6948cb6014e5829d9a79a3794dc9fee0623"},{"author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"change_message_id":"c55599e23d3ff1a6bc0f1dd84e585729caa8b58d","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":3,"id":"2076955a_7b3de99b","in_reply_to":"a7c25098_ab7a7b00","updated":"2025-09-04 13:47:34.000000000","message":"Yeah. That\u0027s what I looked into recently when implementing https://review.opendev.org/c/openstack/neutron-lib/+/958786 .","commit_id":"84aad6948cb6014e5829d9a79a3794dc9fee0623"}],"releasenotes/notes/protect-against-eventlet-reintroduction-976995c8926ef401.yaml":[{"author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"change_message_id":"ed81180a8f623e1aa444fac383f8c2eb1cd78a5a","unresolved":true,"context_lines":[{"line_number":1,"context_line":"---"},{"line_number":2,"context_line":"features:"},{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    Added a new hacking check ``HE305`` to prevent eventlet from being"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"4ebf66e7_4eca275b","line":1,"range":{"start_line":1,"start_character":0,"end_line":1,"end_character":3},"updated":"2025-07-18 09:16:05.000000000","message":"I don\u0027t think these release notes are needed or useful. These notes are for users and they do not care which library is actually used. The hacking check is for developers.\n\nAlso may I know what is the security issue caused by eventlet ? If there is any critical ones we should fix these as we expect some more time before the whole replacement would be completed.","commit_id":"ce749a7582f17c410ab03e0d5275290fde17cb88"},{"author":{"_account_id":28522,"name":"Hervé Beraud","email":"herveberaud.pro@gmail.com","username":"hberaud"},"change_message_id":"e843eb404b949ba4359187617ef7529e99316739","unresolved":true,"context_lines":[{"line_number":1,"context_line":"---"},{"line_number":2,"context_line":"features:"},{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    Added a new hacking check ``HE305`` to prevent eventlet from being"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"cf8ad42f_d716457f","line":1,"range":{"start_line":1,"start_character":0,"end_line":1,"end_character":3},"in_reply_to":"4ebf66e7_4eca275b","updated":"2025-07-18 12:09:26.000000000","message":"Ok for the releasenote, will remove it.\n\nThere is recurrent security issues in eventlet, some are now fixed, and some is still present, especially around the wsgi features. Reports are still privates and undisclosed for now. They have been reported by security researchers. The OpenStack security team is aware of. They impact levels is low are at least medium, but they are there. Here is one old example but still relevant: \n- https://github.com/eventlet/eventlet/pull/574 \n- https://bugs.launchpad.net/swift/+bug/1840507\n\nLet me know if you are interested in jumping into the undisclosed reports, I\u0027ll forward you all the details.","commit_id":"ce749a7582f17c410ab03e0d5275290fde17cb88"},{"author":{"_account_id":28522,"name":"Hervé Beraud","email":"herveberaud.pro@gmail.com","username":"hberaud"},"change_message_id":"bcb6171ee8fb7c689c57a741e3b4b9dd6aeeb2e3","unresolved":false,"context_lines":[{"line_number":1,"context_line":"---"},{"line_number":2,"context_line":"features:"},{"line_number":3,"context_line":"  - |"},{"line_number":4,"context_line":"    Added a new hacking check ``HE305`` to prevent eventlet from being"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"8f29e5c0_8f0e9844","line":1,"range":{"start_line":1,"start_character":0,"end_line":1,"end_character":3},"in_reply_to":"cf8ad42f_d716457f","updated":"2025-07-18 12:11:58.000000000","message":"Done","commit_id":"ce749a7582f17c410ab03e0d5275290fde17cb88"}]}