)]}'
{"id":"openstack%2Fkolla~993017","triplet_id":"openstack%2Fkolla~stable%2F2026.1~Iecd1d8dcf99007e3339120961c7c1d0ca12f83d8","project":"openstack/kolla","branch":"stable/2026.1","hashtags":[],"change_id":"Iecd1d8dcf99007e3339120961c7c1d0ca12f83d8","subject":"kolla-build: Use SandboxedEnvironment to prevent SSTI","status":"MERGED","created":"2026-06-11 19:36:25.000000000","updated":"2026-06-16 23:43:19.000000000","submitted":"2026-06-11 22:50:10.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"993017","cherry_pick_of_change":992777,"cherry_pick_of_patch_set":3,"meta_rev_id":"e601972534cab5f21eb1c3f29b6269d9fdbfefb3","_number":993017,"virtual_id_number":993017,"owner":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-06-11 22:50:09.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"all":[{"value":2,"date":"2026-06-11 21:22:01.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"all":[{"value":1,"date":"2026-06-11 21:22:01.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Backport-Candidate":{"all":[{"value":0,"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Do Not Backport"," 0":"Backport Review Needed","+1":"Should Backport"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"value":0,"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Gate Blocker Fix / Urgent Change"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-06-11 21:06:42.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"8a8be0346de2e4454516d9ac177f768c219575b3","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"date":"2026-06-11 19:36:25.000000000","message":"Patch Set 1: Cherry Picked from branch master.","accounts_in_message":[],"_revision_number":1},{"id":"0d79a46d9c84a90b8792ce962b83054ada2d8faf","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-11 21:06:42.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/fe5dff7a78df4e3e85b68b5ec7b5ab93\n\n- kolla-build-centos-10s https://zuul.opendev.org/t/openstack/build/210252ce57b146c7985ecbc760b8bd0a : SUCCESS in 1h 12m 21s (non-voting)\n- kolla-build-debian-trixie https://zuul.opendev.org/t/openstack/build/fdc32c20f9354d478b1fdd03f2163342 : SUCCESS in 1h 04m 24s\n- kolla-build-debian-trixie-podman https://zuul.opendev.org/t/openstack/build/dcac6b3bafac4f369d992647e577c497 : SUCCESS in 26m 09s\n- kolla-build-rocky-10 https://zuul.opendev.org/t/openstack/build/9c7a84d383f645aeb689e180af897ecf : SUCCESS in 59m 59s\n- kolla-build-rocky-10-podman https://zuul.opendev.org/t/openstack/build/5f208958ed9c4ece85c34c7e006166e7 : SUCCESS in 37m 11s\n- kolla-build-ubuntu-noble https://zuul.opendev.org/t/openstack/build/f684309b2bfa4c028a99a0b7bea15078 : SUCCESS in 1h 24m 03s\n- kolla-build-ubuntu-noble-podman https://zuul.opendev.org/t/openstack/build/ca8e5821ff3546f8b8e69143e3aaa057 : SUCCESS in 14m 29s\n- kolla-tox-genconfig https://zuul.opendev.org/t/openstack/build/8940aa1340034df9ac956d6e90667d84 : SUCCESS in 3m 13s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/e3beeb7d730f4a3b84ec23e0a7e56428 : SUCCESS in 3m 02s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/e80eb574492e441992678ceed4cdde8d : SUCCESS in 2m 09s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/b3807100e09e46ad958202f9cf56b9c6 : SUCCESS in 3m 16s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/e1e36076cbd746e79093a49f2e876361 : SUCCESS in 5m 30s (non-voting)\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/59eeedbb94954c888bdc72477574f590 : SUCCESS in 3m 21s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/060b0bb5be3942c69e25e085604d77d9 : SUCCESS in 6m 05s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/318ec2cf593a4f2a873d4ad272ea9339 : SUCCESS in 7m 50s","accounts_in_message":[],"_revision_number":1},{"id":"cd835b4b8c69981e001341567a16812868d008c5","author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"date":"2026-06-11 21:22:01.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"77027f6149e7bac3fd8aee2f016e6922164eb6aa","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-11 21:22:36.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"0164868ec913f05c8cfad6ed36271d798c721b9a","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-11 22:50:09.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/a72311bccfff4023878768aa83ba9830\n\n- kolla-build-debian-trixie https://zuul.opendev.org/t/openstack/build/db6637d5dad94e9c9f01c10efbb0655a : SUCCESS in 1h 02m 44s\n- kolla-build-debian-trixie-podman https://zuul.opendev.org/t/openstack/build/1c553857b0e04888bc57451e76f4c94d : SUCCESS in 29m 55s\n- kolla-build-rocky-10 https://zuul.opendev.org/t/openstack/build/691c443fed774339851ea1918cec29bd : SUCCESS in 1h 13m 56s\n- kolla-build-rocky-10-podman https://zuul.opendev.org/t/openstack/build/f879660a9b894c12b013bba248142934 : SUCCESS in 42m 43s\n- kolla-build-ubuntu-noble https://zuul.opendev.org/t/openstack/build/a3a3d31943ea439ea92d96f45537786c : SUCCESS in 1h 22m 55s\n- kolla-build-ubuntu-noble-podman https://zuul.opendev.org/t/openstack/build/de9432d843054ca88c2c0641111b2777 : SUCCESS in 30m 47s\n- kolla-tox-genconfig https://zuul.opendev.org/t/openstack/build/800164c5222e4d678a861cf82814830f : SUCCESS in 3m 07s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/c83c2b55836b4a8d8875b1514e2c611a : SUCCESS in 3m 33s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/0b4c14b97be3456ab3b987e05906592e : SUCCESS in 2m 40s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/2d7f0f09b52847db9aee8ea8ff3f33e5 : SUCCESS in 2m 02s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/5021dfc84a7e45ecb2fa067623505ab9 : SUCCESS in 6m 10s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/0b3463e1b9ff40c9a8c788c0a2ccbfb6 : SUCCESS in 8m 48s","accounts_in_message":[],"_revision_number":1},{"id":"1dfa0236a63bea018474ac53cd6751e745be6500","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-11 22:50:10.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":1},{"id":"2c4809e235366648c5c3bcb30c33e7ffdb3f8a5d","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-11 22:51:07.000000000","message":"Patch Set 1:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/7ad9fe7f7860427199cf7333a468a43a\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/ff8b189c4da54467b1595136c701a428 : SUCCESS in 46s","accounts_in_message":[],"_revision_number":1},{"id":"e601972534cab5f21eb1c3f29b6269d9fdbfefb3","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-16 23:43:19.000000000","message":"Patch Set 1:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/107727c151c4465caea4a2e3abbb1eb3\n\n- kolla-build-centos-10s-arm64 https://zuul.opendev.org/t/openstack/build/82f680d76a30400489278c2d18d44683 : POST_FAILURE in 2h 17m 43s (non-voting)\n- kolla-build-debian-trixie-arm64 https://zuul.opendev.org/t/openstack/build/7bdf8c29aa064c21904ff83abd771b1f : SUCCESS in 1h 35m 20s (non-voting)\n- kolla-build-rocky-10-arm64 https://zuul.opendev.org/t/openstack/build/77f22d6c013c40b2b2cb6194680fbc4d : POST_FAILURE in 1h 25m 09s (non-voting)\n- kolla-build-ubuntu-noble-arm64 https://zuul.opendev.org/t/openstack/build/4e3fa93eab4149f89b77edd2551871a5 : SUCCESS in 1h 59m 47s (non-voting)","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"d4aa8ee09e2d6e6676ed2dd7144d541e359fef7e","revisions":{"d4aa8ee09e2d6e6676ed2dd7144d541e359fef7e":{"kind":"REWORK","_number":1,"created":"2026-06-11 19:36:25.000000000","uploader":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"ref":"refs/changes/17/993017/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/kolla","ref":"refs/changes/17/993017/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/kolla refs/changes/17/993017/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/kolla refs/changes/17/993017/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/kolla refs/changes/17/993017/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/kolla refs/changes/17/993017/1"}}},"commit":{"parents":[{"commit":"17fead90867c47b4f30c5e57af32ef5e69e6a6f3","subject":"Merge \"Revert \"kolla-toolbox: Pin openstacksdk to 4.14.0\"\" into stable/2026.1","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/kolla/commit/17fead90867c47b4f30c5e57af32ef5e69e6a6f3"}]}],"author":{"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","date":"2026-06-10 16:27:50.000000000","tz":60},"committer":{"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","date":"2026-06-11 19:36:25.000000000","tz":0},"subject":"kolla-build: Use SandboxedEnvironment to prevent SSTI","message":"kolla-build: Use SandboxedEnvironment to prevent SSTI\n\nSwitch from jinja2.Environment to\njinja2.sandbox.SandboxedEnvironment to block Server-Side Template\nInjection attacks.\n\nCloses-Bug: #2146056\n\nChange-Id: Iecd1d8dcf99007e3339120961c7c1d0ca12f83d8\nSigned-off-by: Michal Nasiadka \u003cmnasiadka@gmail.com\u003e\n(cherry picked from commit 0b20ffce09552014fa52c45de574511dc2200ac5)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/kolla/commit/d4aa8ee09e2d6e6676ed2dd7144d541e359fef7e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/kolla/commit/d4aa8ee09e2d6e6676ed2dd7144d541e359fef7e"}]},"branch":"refs/heads/stable/2026.1","conflicts":{"base":"d55c024327531bf255d96021dfbc8e84a364f9c0","ours":"17fead90867c47b4f30c5e57af32ef5e69e6a6f3","theirs":"0b20ffce09552014fa52c45de574511dc2200ac5","merge_strategy":"recursive","contains_conflicts":false}}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"}},{"label":"Backport-Candidate","status":"MAY"},{"label":"Review-Priority","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Backport-Candidate","description":"Backport candidate status","status":"NOT_APPLICABLE","is_legacy":false,"applicability_expression_result":{"fulfilled":false,"status":"FAIL"},"submittability_expression_result":{"expression":"is:true","fulfilled":true,"status":"NOT_EVALUATED","passing_atoms":[],"failing_atoms":[],"atom_explanations":{}}},{"name":"NonZeroBackportCandidate","description":"A non-zero vote on Backport-Candidate is required before submitting changes","status":"NOT_APPLICABLE","is_legacy":false,"applicability_expression_result":{"fulfilled":false,"status":"FAIL"},"submittability_expression_result":{"expression":"label:Backport-Candidate\u003d1 OR label:Backport-Candidate\u003d-1","fulfilled":true,"status":"NOT_EVALUATED","passing_atoms":[],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Review-Priority","description":"Review priority","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"-label:Review-Priority\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":[],"failing_atoms":["label:Review-Priority\u003dMIN"],"atom_explanations":{"label:Review-Priority\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}