)]}'
{"id":"openstack%2Fkolla~993019","triplet_id":"openstack%2Fkolla~stable%2F2025.1~Iecd1d8dcf99007e3339120961c7c1d0ca12f83d8","project":"openstack/kolla","branch":"stable/2025.1","attention_set":{},"removed_from_attention_set":{"22629":{"account":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"last_update":"2026-06-12 12:00:11.000000000","reason":"\u003cGERRIT_ACCOUNT_22629\u003e replied on the change","reason_account":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"}}},"hashtags":[],"change_id":"Iecd1d8dcf99007e3339120961c7c1d0ca12f83d8","subject":"kolla-build: Use SandboxedEnvironment to prevent SSTI","status":"MERGED","created":"2026-06-11 19:36:47.000000000","updated":"2026-06-17 02:16:32.000000000","submitted":"2026-06-12 15:08:15.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":1,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"993019","cherry_pick_of_change":992777,"cherry_pick_of_patch_set":3,"meta_rev_id":"e97a6756877bf46a1049d31c1a18f6a1c89834e6","_number":993019,"virtual_id_number":993019,"owner":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},{"value":0,"_account_id":23084,"name":"Bartosz Bezak","email":"bartosz@stackhpc.com","username":"b.bezak"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-06-12 15:08:15.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"all":[{"value":2,"date":"2026-06-12 12:00:11.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},{"value":2,"date":"2026-06-12 11:58:22.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":23084,"name":"Bartosz Bezak","email":"bartosz@stackhpc.com","username":"b.bezak"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"all":[{"value":1,"date":"2026-06-12 12:00:11.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},{"value":0,"_account_id":23084,"name":"Bartosz Bezak","email":"bartosz@stackhpc.com","username":"b.bezak"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Backport-Candidate":{"all":[{"value":0,"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},{"value":0,"_account_id":23084,"name":"Bartosz Bezak","email":"bartosz@stackhpc.com","username":"b.bezak"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Do Not Backport"," 0":"Backport Review Needed","+1":"Should Backport"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"value":0,"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},{"value":0,"_account_id":23084,"name":"Bartosz Bezak","email":"bartosz@stackhpc.com","username":"b.bezak"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Gate Blocker Fix / Urgent Change"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},{"_account_id":23084,"name":"Bartosz Bezak","email":"bartosz@stackhpc.com","username":"b.bezak"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-06-11 21:24:57.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-06-12 11:58:22.000000000","updated_by":{"_account_id":23084,"name":"Bartosz Bezak","email":"bartosz@stackhpc.com","username":"b.bezak"},"reviewer":{"_account_id":23084,"name":"Bartosz Bezak","email":"bartosz@stackhpc.com","username":"b.bezak"},"state":"REVIEWER"}],"messages":[{"id":"b603c91de03dc9b5ab8542d34e19d82619c8420a","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"date":"2026-06-11 19:36:47.000000000","message":"Patch Set 1: Cherry Picked from branch master.","accounts_in_message":[],"_revision_number":1},{"id":"7bf519945f11efacb919487dc226d743d84c849b","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-11 21:24:57.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/bfc458198bfb457f892e3c46c70679e4\n\n- kolla-build-centos9s https://zuul.opendev.org/t/openstack/build/0829f8a64072432395218ad1f27cc630 : SUCCESS in 1h 08m 46s (non-voting)\n- kolla-build-centos10s https://zuul.opendev.org/t/openstack/build/c8cd4d3d65fb4c45bcb84f5a500ca0e1 : FAILURE in 41m 47s (non-voting)\n- kolla-ansible-centos9s https://zuul.opendev.org/t/openstack/build/7dddf7242a204599a0a6381ff4221fc0 : SUCCESS in 1h 28m 01s (non-voting)\n- kolla-ansible-centos10s https://zuul.opendev.org/t/openstack/build/33a3bbb88f29476f9719e9de1831f948 : SUCCESS in 1h 32m 07s (non-voting)\n- kolla-build-debian https://zuul.opendev.org/t/openstack/build/4871b512d1bf4fc1a2a39fd05404ca0b : SUCCESS in 42m 34s\n- kolla-build-debian-podman https://zuul.opendev.org/t/openstack/build/38467f8b9c5a49b1a7d96a81323a2b40 : SUCCESS in 34m 05s\n- kolla-ansible-debian https://zuul.opendev.org/t/openstack/build/1f5e02e6d77b452cbe5b6526c0095250 : FAILURE in 6m 53s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/0875fad990bd49b1abe9289de1983b4c : SUCCESS in 4m 15s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/d6665176f87641f3be2f81cb51bf8ea9 : SUCCESS in 3m 42s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/e8c6b02c468f43f191df01aef813e65d : SUCCESS in 3m 48s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/ebbf3669002f4db2bc69b3cf5cf9fe6b : SUCCESS in 4m 09s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/bd549701fb294ccd94f0209c1f33ad38 : SUCCESS in 7m 04s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/d2da4ade85724b5fb7d90415417cd991 : SUCCESS in 7m 12s\n- kolla-tox-genconfig https://zuul.opendev.org/t/openstack/build/444c833a06284357b749e5c7019be22f : SUCCESS in 2m 53s\n- kolla-build-rocky9 https://zuul.opendev.org/t/openstack/build/304fae2f61db4b91bac41dfbfc3decb9 : SUCCESS in 1h 07m 35s\n- kolla-build-rocky9-podman https://zuul.opendev.org/t/openstack/build/a89fbf2b964048269f38d61458c7214b : SUCCESS in 1h 11m 29s\n- kolla-ansible-rocky9 https://zuul.opendev.org/t/openstack/build/2717a8e6c0a241208a05633b3488bedd : SUCCESS in 1h 29m 07s\n- kolla-build-rocky10 https://zuul.opendev.org/t/openstack/build/6c431cba92a94f93aad61108e83230f0 : FAILURE in 49m 50s\n- kolla-build-rocky10-podman https://zuul.opendev.org/t/openstack/build/ca9e0dc731a54ddebd8060708b2a2499 : FAILURE in 1h 15m 32s\n- kolla-ansible-rocky10 https://zuul.opendev.org/t/openstack/build/6b4e2faf7af449c99a4b9f3041aac077 : SUCCESS in 1h 33m 57s\n- kolla-build-ubuntu https://zuul.opendev.org/t/openstack/build/3a2b02acceba429c8b77affec48060de : SUCCESS in 59m 34s\n- kolla-build-ubuntu-podman https://zuul.opendev.org/t/openstack/build/087bf7286f014e608a61506965176cb5 : SUCCESS in 29m 57s\n- kolla-ansible-ubuntu https://zuul.opendev.org/t/openstack/build/19004e8c44e846ea9d55319eca4fd134 : SUCCESS in 1h 08m 51s","accounts_in_message":[],"_revision_number":1},{"id":"c100ae581e5c468af15b6ba54995f789588ef8c3","author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"date":"2026-06-12 11:49:56.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"aa480bc8325234f121f3705c9f73df87b5399e31","author":{"_account_id":23084,"name":"Bartosz Bezak","email":"bartosz@stackhpc.com","username":"b.bezak"},"date":"2026-06-12 11:58:22.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"2104c76a5274b07e1f5342c5db259bdc40335035","author":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"date":"2026-06-12 12:00:11.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"41da8c3857ca78e301203930dba70962ab12306f","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-12 13:36:56.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/fa8d7e2fb5ce4d618480727dbc0930f2\n\n- kolla-build-centos9s https://zuul.opendev.org/t/openstack/build/5f85f7b903b249348117a634102ee73b : SUCCESS in 54m 27s (non-voting)\n- kolla-build-centos10s https://zuul.opendev.org/t/openstack/build/c16ce3d2acae484682a32e38935fa4e5 : SUCCESS in 1h 00m 59s (non-voting)\n- kolla-ansible-centos9s https://zuul.opendev.org/t/openstack/build/53aa0bc5c93845c2afbf737ad85f8dbe : SUCCESS in 1h 27m 26s (non-voting)\n- kolla-ansible-centos10s https://zuul.opendev.org/t/openstack/build/c1bcd4cafdc34e41822e2db26d2fbcb2 : SUCCESS in 1h 14m 16s (non-voting)\n- kolla-build-debian https://zuul.opendev.org/t/openstack/build/1f5c5be36ea646199684ec93b7ee4532 : SUCCESS in 47m 03s\n- kolla-build-debian-podman https://zuul.opendev.org/t/openstack/build/af9beac0941e4ce2b88137291419d99f : SUCCESS in 24m 38s\n- kolla-ansible-debian https://zuul.opendev.org/t/openstack/build/f0e0b6b783a040d3a6731aa96328dbfc : SUCCESS in 59m 24s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/482ada34edce4073a4727dd70a186384 : SUCCESS in 3m 59s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/c4896db8b9c64c88ac347e4fd14ca0d7 : SUCCESS in 3m 05s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/3242020b23c5485b9bc23d23ffe84264 : SUCCESS in 5m 01s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/9821d2be6bd04d0284c40cb385132404 : SUCCESS in 3m 32s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/b386aa7976f04980a9d36b0076645e28 : SUCCESS in 4m 44s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/3f0f8d2a9f564f3fb275e6589f440867 : SUCCESS in 8m 32s\n- kolla-tox-genconfig https://zuul.opendev.org/t/openstack/build/844f950ce01d495580d33f97446e4ac7 : SUCCESS in 1m 56s\n- kolla-build-rocky9 https://zuul.opendev.org/t/openstack/build/d90425db045146168544434cea9a8762 : SUCCESS in 50m 21s\n- kolla-build-rocky9-podman https://zuul.opendev.org/t/openstack/build/1ff1a6c8f89a45988b050df92fe9db38 : SUCCESS in 55m 13s\n- kolla-ansible-rocky9 https://zuul.opendev.org/t/openstack/build/a84a10d35f4e445a9c25b2eeaa313d6d : SUCCESS in 54m 13s\n- kolla-build-rocky10 https://zuul.opendev.org/t/openstack/build/8cc8a60df034439aa640581cf698bb0b : SUCCESS in 47m 14s\n- kolla-build-rocky10-podman https://zuul.opendev.org/t/openstack/build/f1368dae0c18447285fd70a61f65e8ec : SUCCESS in 1h 13m 47s\n- kolla-ansible-rocky10 https://zuul.opendev.org/t/openstack/build/ea81ea5627cb4fbbbe6c0828ff22b0cf : SUCCESS in 1h 30m 59s\n- kolla-build-ubuntu https://zuul.opendev.org/t/openstack/build/7e9c52cd8d524afab167326ea1e72c25 : SUCCESS in 41m 36s\n- kolla-build-ubuntu-podman https://zuul.opendev.org/t/openstack/build/fa7d8c365e5141ff848f5ea388e7db7c : SUCCESS in 24m 21s\n- kolla-ansible-ubuntu https://zuul.opendev.org/t/openstack/build/f090c7a9624d4117955d7a3f7eeb48fe : SUCCESS in 1h 06m 34s","accounts_in_message":[],"_revision_number":1},{"id":"d1c40daa34b6e7ce0062ca2c67b5284907598635","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-12 13:37:16.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"b9e3529684dfa38a05df7cda0db005f8b431412d","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-12 15:08:15.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/b74164eee5604938b7d3472e91098485\n\n- kolla-build-debian https://zuul.opendev.org/t/openstack/build/607dda7c2aad412c913bc29b1bd40f71 : SUCCESS in 52m 37s\n- kolla-build-debian-podman https://zuul.opendev.org/t/openstack/build/325499b1774f4279ba4e5565e2a05568 : SUCCESS in 33m 04s\n- kolla-ansible-debian https://zuul.opendev.org/t/openstack/build/34471d681f9c4d568c6a703c91a04612 : SUCCESS in 59m 58s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/2b09dd8e4b9c4d2ba6fea74be0c3119e : SUCCESS in 3m 48s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/cdf867c1ced74096b811d48de216652a : SUCCESS in 2m 59s\n- openstack-tox-py312 https://zuul.opendev.org/t/openstack/build/23578789f2c1461c96957835859b6ac1 : SUCCESS in 5m 25s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/141b52ce42b145b08cf34d609f248617 : SUCCESS in 5m 58s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/d5205a3323d94f13bc20784507575615 : SUCCESS in 8m 00s\n- kolla-tox-genconfig https://zuul.opendev.org/t/openstack/build/f4a7adafd37944a09a72c802d9b3e3f3 : SUCCESS in 2m 56s\n- kolla-build-rocky9 https://zuul.opendev.org/t/openstack/build/e1a75242f8f54162aa2cd18395638b11 : SUCCESS in 1h 05m 31s\n- kolla-build-rocky9-podman https://zuul.opendev.org/t/openstack/build/25b2c9a4116a4ebe96a0c4fab38b077f : SUCCESS in 1h 17m 59s\n- kolla-ansible-rocky9 https://zuul.opendev.org/t/openstack/build/43ecbde1597e4aa59fa8c773e51100f2 : SUCCESS in 1h 25m 14s\n- kolla-build-rocky10 https://zuul.opendev.org/t/openstack/build/73e641b9cb0e4692b2fcc748d38db784 : SUCCESS in 40m 28s\n- kolla-build-rocky10-podman https://zuul.opendev.org/t/openstack/build/97b24618bbb04d34b7e4c145ce7154b0 : SUCCESS in 1h 23m 25s\n- kolla-ansible-rocky10 https://zuul.opendev.org/t/openstack/build/8bbccbd8f7944cb8b6ea242689483a15 : SUCCESS in 51m 15s\n- kolla-build-ubuntu https://zuul.opendev.org/t/openstack/build/d6db4d0dc4b44f87a144b30ac2d61bc5 : SUCCESS in 54m 25s\n- kolla-build-ubuntu-podman https://zuul.opendev.org/t/openstack/build/e02deb24fb5d459fb45566f1c85d94f1 : SUCCESS in 30m 19s\n- kolla-ansible-ubuntu https://zuul.opendev.org/t/openstack/build/6f8febbc6aae4f6088a42a2bfd0cc39f : SUCCESS in 1h 06m 24s","accounts_in_message":[],"_revision_number":1},{"id":"f9a1fda8f5eadb5d49509980b8b161400650f62b","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-12 15:08:15.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":1},{"id":"ea8e58b0b0bc40e08500fb5360f2a1ae52b55103","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-12 15:10:36.000000000","message":"Patch Set 1:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/bb631ecd7a9f42bf90a74d7093d45f5f\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/d207d264e0034eb3b255f52f2232c156 : SUCCESS in 44s","accounts_in_message":[],"_revision_number":1},{"id":"e97a6756877bf46a1049d31c1a18f6a1c89834e6","tag":"autogenerated:zuul:check-arm64","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-17 02:16:32.000000000","message":"Patch Set 1:\n\nBuild succeeded (ARM64 pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/7f8cbc16a2a14f149b0a7c7adcf2f9c0\n\n- kolla-build-centos9s-aarch64 https://zuul.opendev.org/t/openstack/build/3aae05f9eb8143ad87842ba9ad3b2512 : SUCCESS in 1h 06m 55s (non-voting)\n- kolla-build-centos10s-aarch64 https://zuul.opendev.org/t/openstack/build/a5ed3954ecc04f72ac582092156a614b : POST_FAILURE in 1h 10m 51s (non-voting)\n- kolla-build-debian-aarch64 https://zuul.opendev.org/t/openstack/build/b9b3935c22604a1eb080f65b2250e70a : SUCCESS in 1h 01m 52s (non-voting)\n- kolla-ansible-debian-aarch64 https://zuul.opendev.org/t/openstack/build/0e7d0735341840b388bf2f0c39b6957d : POST_FAILURE in 9m 52s (non-voting)\n- kolla-build-rocky9-aarch64 https://zuul.opendev.org/t/openstack/build/d09a92e39504428fa1dc42c0ef91c006 : SUCCESS in 1h 17m 52s (non-voting)\n- kolla-build-rocky10-aarch64 https://zuul.opendev.org/t/openstack/build/6f453b4fe9ed4051a1a6e87a8cc9a426 : SUCCESS in 1h 17m 12s (non-voting)\n- kolla-build-ubuntu-aarch64 https://zuul.opendev.org/t/openstack/build/0c32942671874eeaa21e267eea59bcb9 : POST_FAILURE in 51m 47s (non-voting)","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"eb3fbdaf790006e443fb082420bf01fad97a0e54","revisions":{"eb3fbdaf790006e443fb082420bf01fad97a0e54":{"kind":"REWORK","_number":1,"created":"2026-06-11 19:36:47.000000000","uploader":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"},"ref":"refs/changes/19/993019/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/kolla","ref":"refs/changes/19/993019/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/kolla refs/changes/19/993019/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/kolla refs/changes/19/993019/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/kolla refs/changes/19/993019/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/kolla refs/changes/19/993019/1"}}},"commit":{"parents":[{"commit":"b94865f90dc0e4130e028b25f7c6e1356ebaae4c","subject":"stable-only: fix zuul config","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/kolla/commit/b94865f90dc0e4130e028b25f7c6e1356ebaae4c"}]}],"author":{"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","date":"2026-06-10 16:27:50.000000000","tz":60},"committer":{"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","date":"2026-06-11 19:36:47.000000000","tz":0},"subject":"kolla-build: Use SandboxedEnvironment to prevent SSTI","message":"kolla-build: Use SandboxedEnvironment to prevent SSTI\n\nSwitch from jinja2.Environment to\njinja2.sandbox.SandboxedEnvironment to block Server-Side Template\nInjection attacks.\n\nCloses-Bug: #2146056\n\nChange-Id: Iecd1d8dcf99007e3339120961c7c1d0ca12f83d8\nSigned-off-by: Michal Nasiadka \u003cmnasiadka@gmail.com\u003e\n(cherry picked from commit 0b20ffce09552014fa52c45de574511dc2200ac5)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/kolla/commit/eb3fbdaf790006e443fb082420bf01fad97a0e54"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/kolla/commit/eb3fbdaf790006e443fb082420bf01fad97a0e54"}]},"branch":"refs/heads/stable/2025.1","conflicts":{"base":"d55c024327531bf255d96021dfbc8e84a364f9c0","ours":"b94865f90dc0e4130e028b25f7c6e1356ebaae4c","theirs":"0b20ffce09552014fa52c45de574511dc2200ac5","merge_strategy":"recursive","contains_conflicts":false}}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":23084,"name":"Bartosz Bezak","email":"bartosz@stackhpc.com","username":"b.bezak"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":22629,"name":"Michal Nasiadka","email":"mnasiadka@gmail.com","username":"mnasiadka"}},{"label":"Backport-Candidate","status":"MAY"},{"label":"Review-Priority","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Backport-Candidate","description":"Backport candidate status","status":"NOT_APPLICABLE","is_legacy":false,"applicability_expression_result":{"fulfilled":false,"status":"FAIL"},"submittability_expression_result":{"expression":"is:true","fulfilled":true,"status":"NOT_EVALUATED","passing_atoms":[],"failing_atoms":[],"atom_explanations":{}}},{"name":"NonZeroBackportCandidate","description":"A non-zero vote on Backport-Candidate is required before submitting changes","status":"NOT_APPLICABLE","is_legacy":false,"applicability_expression_result":{"fulfilled":false,"status":"FAIL"},"submittability_expression_result":{"expression":"label:Backport-Candidate\u003d1 OR label:Backport-Candidate\u003d-1","fulfilled":true,"status":"NOT_EVALUATED","passing_atoms":[],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Review-Priority","description":"Review priority","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"-label:Review-Priority\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":[],"failing_atoms":["label:Review-Priority\u003dMIN"],"atom_explanations":{"label:Review-Priority\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}