)]}'
{"id":"openstack%2Fmistral~991403","triplet_id":"openstack%2Fmistral~stable%2F2026.1~Ic01a06f2bd588f7b0ade74403393f52e96f25432","project":"openstack/mistral","branch":"stable/2026.1","attention_set":{},"removed_from_attention_set":{"11583":{"account":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"last_update":"2026-06-03 20:55:58.000000000","reason":"removed on reply"}},"hashtags":[],"change_id":"Ic01a06f2bd588f7b0ade74403393f52e96f25432","subject":"Restrict code_sources and dynamic_actions policies to admin only","status":"MERGED","created":"2026-06-03 14:36:59.000000000","updated":"2026-06-04 06:21:37.000000000","submitted":"2026-06-04 06:21:37.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"991403","meta_rev_id":"0b7cd9b7881a799748541f1482b503a681ce5612","_number":991403,"virtual_id_number":991403,"owner":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-06-04 06:21:37.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2026-06-04 05:32:49.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":1,"date":"2026-06-04 05:32:49.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-06-03 16:26:39.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"b3b95115f6dfe7eafd7602aadce6d804320f0307","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"date":"2026-06-03 14:36:59.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"d6b31830b857be081a26a8aff8e035ce3221d0d1","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-03 16:26:39.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/f3844a7d323f423b823e33b7adf9db13\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/e1c6b86d68634bf98150bf1aefcdc04b : SUCCESS in 4m 37s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/466133ae3d4d418ab773741a466992c1 : SUCCESS in 10m 24s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/f7e37406026947018097e090f2a7ac30 : SUCCESS in 10m 26s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/39c3c3af8eac4a1884c6aa580436fedb : SUCCESS in 15m 51s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/e6b6823dbf5e486db31f77da0a70b6b8 : SUCCESS in 10m 37s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/a8b7c2b9b2fd412f8d5cead5c3ec1177 : SUCCESS in 4m 53s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/fd856292de2c47cca4497c40acd48391 : SUCCESS in 16m 04s (non-voting)\n- mistral-devstack https://zuul.opendev.org/t/openstack/build/4ee20fe3dadf444c9cb4c9071e3c2e0b : FAILURE in 42m 26s\n- mistral-devstack-tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/83f28e63b56e4ff9bd8d8747fbc0890b : FAILURE in 42m 10s","accounts_in_message":[],"_revision_number":1},{"id":"d22e778b9a5ca1ab5e7b424a3d75a092bba74e07","author":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"date":"2026-06-03 20:55:58.000000000","message":"Patch Set 1:\n\nrecheck","accounts_in_message":[],"_revision_number":1},{"id":"18a75e3b3ee367d675f8908ce89b2669588bde85","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-03 21:34:31.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/a26e079120ad4cdcb4fe2d1819394295\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/d17865aff400439cb14ad539dfce4ec3 : SUCCESS in 6m 25s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/82919715c7d04cf691e8cc5afe17e689 : SUCCESS in 11m 55s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/c2998d6e122e449aa7c629ed7b1b3216 : SUCCESS in 10m 18s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/a03eeb8b8cf44fa5ae5fcadd0e16ce2c : SUCCESS in 12m 03s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/a950372fab20400491a22ea0f2a4031e : SUCCESS in 9m 55s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/5c2d98aaa9f84a42a1f6d4ed5fdfd11a : SUCCESS in 5m 42s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/4dce98eff2e34ebdbbec048cfb5c08ec : SUCCESS in 12m 42s (non-voting)\n- mistral-devstack https://zuul.opendev.org/t/openstack/build/51aa84b0756149d4b8b348a31b35e73f : SUCCESS in 27m 01s\n- mistral-devstack-tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/5b34ed7e91d64aa9b144687a4604c45c : SUCCESS in 32m 32s","accounts_in_message":[],"_revision_number":1},{"id":"57b73a01b05f8c3ef224e9dea4cb00a936f24ee5","author":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"date":"2026-06-04 05:32:49.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":1},{"id":"ebe402dfd73369bc1423eacd9e7d4d2848c1ca2e","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-04 05:33:32.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"c098fcdca7e3109471f7bd9bcf783f031ce2ac97","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-04 06:21:37.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/2e833ec511d34d5ca10e7fe5536da615\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/c166e3521983405f8afb53e9e0b10dc6 : SUCCESS in 4m 06s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/636ab74805f84a0fbd42bdc36b8cae85 : SUCCESS in 10m 51s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/9abf4434d6fd4c87812e5a3a49ffcd51 : SUCCESS in 10m 58s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/25bd0dc29248421eb4b163893d1a869d : SUCCESS in 10m 00s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/1e377df98a4f46e8ba2a81a7bf727693 : SUCCESS in 2m 53s\n- mistral-devstack https://zuul.opendev.org/t/openstack/build/afad00c33ed04393be87f587c0803f61 : SUCCESS in 22m 29s\n- mistral-devstack-tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/8a922057a993490a9c84c2a4b7dc156a : SUCCESS in 38m 36s","accounts_in_message":[],"_revision_number":1},{"id":"0b7cd9b7881a799748541f1482b503a681ce5612","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-04 06:21:37.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"346b06b488820a756aba2be5f2ee34bdb1e93c4a","revisions":{"346b06b488820a756aba2be5f2ee34bdb1e93c4a":{"kind":"REWORK","_number":1,"created":"2026-06-03 14:36:59.000000000","uploader":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"ref":"refs/changes/03/991403/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/mistral","ref":"refs/changes/03/991403/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/mistral refs/changes/03/991403/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/mistral refs/changes/03/991403/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/mistral refs/changes/03/991403/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/mistral refs/changes/03/991403/1"}}},"commit":{"parents":[{"commit":"5b83ba2a8cbd4eb937731ebf3408cb629ccefd8e","subject":"Add code_sources publicize policy and enforcement","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/5b83ba2a8cbd4eb937731ebf3408cb629ccefd8e"}]}],"author":{"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","date":"2026-03-30 09:57:27.000000000","tz":120},"committer":{"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","date":"2026-06-03 07:20:00.000000000","tz":120},"subject":"Restrict code_sources and dynamic_actions policies to admin only","message":"Restrict code_sources and dynamic_actions policies to admin only\n\nThese APIs previously defaulted to admin_or_owner, allowing any project\nowner to manage code sources and dynamic actions. Restrict all operations\nto admin_only to reduce the attack surface for arbitrary code execution.\n\nRelated-Bug: #2147178\nCo-Authored-By: Claude Opus 4.6 (1M context) \u003cnoreply@anthropic.com\u003e\nSigned-off-by: Arnaud Morin \u003carnaud.morin@gmail.com\u003e\nChange-Id: Ic01a06f2bd588f7b0ade74403393f52e96f25432\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/346b06b488820a756aba2be5f2ee34bdb1e93c4a"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/346b06b488820a756aba2be5f2ee34bdb1e93c4a"}]},"branch":"refs/heads/stable/2026.1"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}