)]}'
{"id":"openstack%2Fironic~987921","triplet_id":"openstack%2Fironic~bugfix%2F33.0~Ie85357166fafca0acd9d852fe05ce34818d2b366","project":"openstack/ironic","branch":"bugfix/33.0","topic":"security-bug-2148307-stable/2026.1-bugfix/33.0","attention_set":{},"removed_from_attention_set":{"11655":{"account":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"last_update":"2026-06-30 16:46:03.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"Ie85357166fafca0acd9d852fe05ce34818d2b366","subject":"security: Use sandbox rendering for jinja2","status":"MERGED","created":"2026-05-08 19:00:55.000000000","updated":"2026-06-30 16:48:31.000000000","submitted":"2026-06-30 16:46:03.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":2,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"987921-security-bug-2148307-stable/2026.1-bugfix/33.0","cherry_pick_of_change":987774,"cherry_pick_of_patch_set":1,"meta_rev_id":"2d3638b35034347ec5de4d930f52de4effc98931","_number":987921,"virtual_id_number":987921,"owner":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-06-30 16:46:02.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"all":[{"value":2,"date":"2026-06-11 15:26:25.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"all":[{"value":1,"date":"2026-06-11 15:26:25.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Backport-Candidate":{"all":[{"value":0,"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Do Not Backport"," 0":"Backport Review Needed","+1":"Should Backport"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"CC":[{"_account_id":10239,"name":"Dmitry Tantsur","email":"dtantsur@protonmail.com","username":"dtantsur"}],"REVIEWER":[{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-05-08 19:54:45.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-06-11 15:26:25.000000000","updated_by":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"reviewer":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"state":"REVIEWER"},{"updated":"2026-06-30 14:18:39.000000000","updated_by":{"_account_id":10239,"name":"Dmitry Tantsur","email":"dtantsur@protonmail.com","username":"dtantsur"},"reviewer":{"_account_id":10239,"name":"Dmitry Tantsur","email":"dtantsur@protonmail.com","username":"dtantsur"},"state":"CC"}],"messages":[{"id":"323b10f7c93ff01a1c8046a5b765b158c6b814f8","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"date":"2026-05-08 19:00:55.000000000","message":"Patch Set 1: Cherry Picked from branch stable/2026.1.","accounts_in_message":[],"_revision_number":1},{"id":"1f4764cd9a83c98e821e97f65a6f6d25981eb2d2","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-08 19:54:45.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/aff4ab3bbd51413498a33d9c83a10ede\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/5fb3c2278b834ff6bf55a14a77a35042 : FAILURE in 3m 08s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/9ac0b3ff874648bc8a2b5969ca04b3c0 : SUCCESS in 7m 35s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/ab0e290a0b3643f8822b1f87a6667ae8 : SUCCESS in 17m 13s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/7ab7e75b8562498898a8c97b66a5bb29 : SUCCESS in 16m 33s\n- ironic-tox-unit-mysql-migrations https://zuul.opendev.org/t/openstack/build/c58f5129dd6340c28d3de29f755d1f15 : FAILURE in 3m 44s\n- ironic-tox-unit-with-driver-libs https://zuul.opendev.org/t/openstack/build/dcb8e21a3d28478ab37cca747e8af1e6 : FAILURE in 5m 05s\n- ironic-cross-sushy https://zuul.opendev.org/t/openstack/build/0556de49d82b41a0b63e3cd1b1704907 : FAILURE in 5m 10s (non-voting)\n- metal3-ironic-standalone-operator-functional https://zuul.opendev.org/t/openstack/build/2851b9cbe8e14c359d29093f90a7db8f : FAILURE in 8m 58s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"4d1bc5ad7759f542b604e2f4931b4c5d5412f9b1","author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"date":"2026-06-11 15:26:25.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"e6a693754d0fca3fdd5c104a77ddcd3c626c3c04","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-11 16:39:58.000000000","message":"Patch Set 1:\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/38d125cb39a14debb95417277eda8699\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/cafd331d08c547cf9bb092d8da689fe6 : SUCCESS in 17m 09s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/eec782c0173a4bcb881f8075747adb58 : SUCCESS in 24m 56s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/3ca26d45018342558e402b24e57211ea : SUCCESS in 9m 58s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/d088c2dd4dce4264a0800b092ff15105 : SUCCESS in 10m 44s\n- ironic-tox-unit-mysql-migrations https://zuul.opendev.org/t/openstack/build/7484c2ee6ba749f4afa2eec3deb612eb : SUCCESS in 6m 12s\n- ironic-tox-unit-with-driver-libs https://zuul.opendev.org/t/openstack/build/c3cea7022f5742dbad3d3e1c9348ebcd : SUCCESS in 9m 00s\n- ironic-tempest-functional-python3 https://zuul.opendev.org/t/openstack/build/840b33663dac452da2068e6dc11fbc69 : FAILURE in 1h 03m 10s\n- ironic-tempest-bios-redfish-pxe https://zuul.opendev.org/t/openstack/build/37345ec0af6e418380858f575f0e4c89 : SUCCESS in 54m 30s\n- ironic-tempest-uefi-redfish-vmedia https://zuul.opendev.org/t/openstack/build/cbb9b27636074f02a5b4eaa57a58649e : SUCCESS in 50m 35s\n- ironic-tempest-uefi-redfish-https https://zuul.opendev.org/t/openstack/build/109ecba636f340879b728789b777b40a : SUCCESS in 34m 55s\n- ironic-tempest-bios-ipmi-direct https://zuul.opendev.org/t/openstack/build/ea2b216f5a5a4f4a958a866fd58a68da : SUCCESS in 1h 01m 00s\n- ironic-tempest-bfv https://zuul.opendev.org/t/openstack/build/d40fafac37b84f0384454985b87b62e8 : SUCCESS in 42m 47s\n- ironic-tempest-ipa-partition-uefi-pxe-grub2 https://zuul.opendev.org/t/openstack/build/d4499cf3d11846f983204599ce4da005 : SUCCESS in 41m 07s\n- ironic-tempest-uefi-redfish-vmedia-4k https://zuul.opendev.org/t/openstack/build/61047a4245cd4312bf07a4b71c48ad70 : SUCCESS in 29m 26s","accounts_in_message":[],"_revision_number":1},{"id":"f9fe3c53c901c5d16695b97fb453f7fde796f337","author":{"_account_id":10239,"name":"Dmitry Tantsur","email":"dtantsur@protonmail.com","username":"dtantsur"},"date":"2026-06-30 14:18:39.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"27a251ee21e0eeef2ed28dd9aa3333ad5beedfb6","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-30 15:48:22.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/6e5a4c96149e434aab50fdb2b196437e\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/c0b9fdc5969544a5b6ed3ccaee688880 : SUCCESS in 8m 50s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/2f4789ece06543f281066e51bef6f03b : SUCCESS in 28m 54s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/599b4b33eb4943dfb142339086a7617e : SUCCESS in 8m 29s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/f02edecf9e6f47afbbd0291e9de97db9 : SUCCESS in 11m 22s\n- ironic-tox-unit-mysql-migrations https://zuul.opendev.org/t/openstack/build/9b89fb3bfcd6466b8e5712f2875f64f2 : SUCCESS in 5m 08s\n- ironic-tox-unit-with-driver-libs https://zuul.opendev.org/t/openstack/build/7bbb2d3e82744b21bd06a00fcf08a24f : SUCCESS in 10m 05s\n- ironic-tempest-functional-python3 https://zuul.opendev.org/t/openstack/build/5ba3fc91a29d47fd822d06b0d64e7bab : SUCCESS in 34m 34s\n- ironic-tempest-bios-redfish-pxe https://zuul.opendev.org/t/openstack/build/de8180de6e184dd7a28fd6d02648f191 : SUCCESS in 45m 04s\n- ironic-tempest-uefi-redfish-vmedia https://zuul.opendev.org/t/openstack/build/870f0ff857fd4665941d09b851a926f9 : SUCCESS in 49m 02s\n- ironic-tempest-uefi-redfish-https https://zuul.opendev.org/t/openstack/build/000c9ce79ca948aea9ce95de390de5b1 : SUCCESS in 23m 38s\n- ironic-tempest-bios-ipmi-direct https://zuul.opendev.org/t/openstack/build/adc2793f0404409aba432e8656093d76 : SUCCESS in 53m 35s\n- ironic-tempest-bfv https://zuul.opendev.org/t/openstack/build/b3e9370336cd4283b9bd8a077046982c : SUCCESS in 40m 05s\n- ironic-tempest-ipa-partition-uefi-pxe-grub2 https://zuul.opendev.org/t/openstack/build/aa6d2180b3244375a132c4ed24bff12d : SUCCESS in 23m 05s\n- ironic-tempest-uefi-redfish-vmedia-4k https://zuul.opendev.org/t/openstack/build/7d4fbdf2ead2425e88b9ab8763876a2b : SUCCESS in 1h 23m 41s","accounts_in_message":[],"_revision_number":1},{"id":"ee95ca2cc4012b726c4c0d92686fb3b9a896755e","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-30 15:48:59.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"077edb55e933b3b1217281143d577ad217358658","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-30 16:46:02.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/9c0b0a75687c47c98087800426c12f72\n\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/2cc92e4fcc814bd9b0ad42a0d2960a83 : SUCCESS in 9m 32s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/516c6e99cb574f8999eeb8d6bc40cb72 : SUCCESS in 10m 24s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/d143497527e94390831dd2b362d3f83b : SUCCESS in 10m 53s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/7c99564afb3a422a8000f9f172dac147 : SUCCESS in 11m 41s\n- ironic-tox-unit-mysql-migrations https://zuul.opendev.org/t/openstack/build/dd2ba8b6b9024838932bdbd77267d22e : SUCCESS in 5m 18s\n- ironic-tox-unit-with-driver-libs https://zuul.opendev.org/t/openstack/build/529d385a37374b7f8c2659d24e40f59e : SUCCESS in 11m 11s\n- ironic-tempest-functional-python3 https://zuul.opendev.org/t/openstack/build/c16982ff52c04268a0cecef3fad31935 : SUCCESS in 21m 16s\n- ironic-tempest-bios-redfish-pxe https://zuul.opendev.org/t/openstack/build/087df4b5eb8941d8b06e76d092e9d4d4 : SUCCESS in 36m 29s\n- ironic-tempest-uefi-redfish-vmedia https://zuul.opendev.org/t/openstack/build/304bd894d4064bef8934bde75927ffa2 : SUCCESS in 36m 50s\n- ironic-tempest-uefi-redfish-https https://zuul.opendev.org/t/openstack/build/13a578357d2f424f98f4b7319d61ab9e : SUCCESS in 51m 57s\n- ironic-tempest-bios-ipmi-direct https://zuul.opendev.org/t/openstack/build/0fedcf1842c44c1489c58dc993a9808a : SUCCESS in 32m 21s\n- ironic-tempest-bfv https://zuul.opendev.org/t/openstack/build/aadd08b5ae3a4bd0b9a2eba98ef445f9 : SUCCESS in 45m 36s\n- ironic-tempest-ipa-partition-uefi-pxe-grub2 https://zuul.opendev.org/t/openstack/build/ced569886a5d433ab4425dda81e7de8d : SUCCESS in 25m 53s\n- ironic-tempest-uefi-redfish-vmedia-4k https://zuul.opendev.org/t/openstack/build/6a1da96898f24b59a1a48624e9858ad7 : SUCCESS in 55m 07s","accounts_in_message":[],"_revision_number":1},{"id":"7dcd3f06f92548694998e1db9a19e0a5a7bc1154","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-30 16:46:03.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":1},{"id":"2d3638b35034347ec5de4d930f52de4effc98931","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-30 16:48:31.000000000","message":"Patch Set 1:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/b016d904009143d291bdc4426efd03d7\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/0a5173e335a54b16883cdbc7703687a4 : SUCCESS in 1m 11s\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/3f6ac83ade3341eba97ffa6ddba71f7b : SUCCESS in 42s","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"bb4c5015124735f9e2f13a19b2108c8f072850a9","revisions":{"bb4c5015124735f9e2f13a19b2108c8f072850a9":{"kind":"REWORK","_number":1,"created":"2026-05-08 19:00:55.000000000","uploader":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"ref":"refs/changes/21/987921/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/ironic","ref":"refs/changes/21/987921/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/ironic refs/changes/21/987921/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/ironic refs/changes/21/987921/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/ironic refs/changes/21/987921/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/ironic refs/changes/21/987921/1"}}},"commit":{"parents":[{"commit":"f4d44b1ea2a1457a471cbf20eea6f39ace91d65a","subject":"Fix Redfish boot device setting for full boot request vendors","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/ironic/commit/f4d44b1ea2a1457a471cbf20eea6f39ace91d65a"}]}],"author":{"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","date":"2026-04-28 18:11:22.000000000","tz":-420},"committer":{"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","date":"2026-05-08 19:00:55.000000000","tz":0},"subject":"security: Use sandbox rendering for jinja2","message":"security: Use sandbox rendering for jinja2\n\nAnalysis revealed that a malicious attacker with sufficent\naccess to request a node to be provisioned could supply a\nmaliciously crafted kickstart template configuration,\nwhich would then be rendered in an unsafe form ultimately.\n\nThis is because the underlying render utility was modeled\nfor rendering only admin-suppied files or the in-code tree\nfiles. Anaconda had to take this further by allowing the\njinja utilized to be user supplied.\n\nAnyhow, an attacker with sufficient access, an ironic deployment\nwith the anaconda deploy interface, a node with the anaconda\ndeployment interface set by an admin, and a malicious template\ncould result in conductor internal data being rendered and if\nthe infrastucture operator is allowing traffic egress for the\nprovisioning network, could have sensitive internal data\nexfiled out of the environment.\n\nThe render helper has been changed to utilize a sandboxed\nenvironment. Attacks such as this now internally raise\na Jinja2 SecurityError.\n\nCloses-Bug: 2148307\nChange-Id: Ie85357166fafca0acd9d852fe05ce34818d2b366\nSigned-off-by: Julia Kreger \u003cjuliaashleykreger@gmail.com\u003e\n(cherry picked from commit a1f9a1e83a3f27d9cb5c796764ddb07ad8cb2616)\n(cherry picked from commit fa70032da874c4a2207c28d46124c7dd35321196)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/ironic/commit/bb4c5015124735f9e2f13a19b2108c8f072850a9"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/ironic/commit/bb4c5015124735f9e2f13a19b2108c8f072850a9"}]},"branch":"refs/heads/bugfix/33.0","conflicts":{"ours":"f4d44b1ea2a1457a471cbf20eea6f39ace91d65a","theirs":"fa70032da874c4a2207c28d46124c7dd35321196","contains_conflicts":false}}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"}},{"label":"Backport-Candidate","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Backport-Candidate","description":"Backport candidate status","status":"NOT_APPLICABLE","is_legacy":false,"applicability_expression_result":{"fulfilled":false,"status":"FAIL"},"submittability_expression_result":{"expression":"is:true","fulfilled":true,"status":"NOT_EVALUATED","passing_atoms":[],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}