)]}'
{"id":"openstack%2Fmistral~991453","triplet_id":"openstack%2Fmistral~unmaintained%2F2024.1~Ic01a06f2bd588f7b0ade74403393f52e96f25432","project":"openstack/mistral","branch":"unmaintained/2024.1","topic":"unmaintained-2024.1-OSSA-2026-020","attention_set":{},"removed_from_attention_set":{"17685":{"account":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},"last_update":"2026-06-11 18:40:11.000000000","reason":"\u003cGERRIT_ACCOUNT_17685\u003e replied on the change","reason_account":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"}},"16137":{"account":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"last_update":"2026-06-11 20:42:23.000000000","reason":"Change was submitted"},"11583":{"account":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"last_update":"2026-06-11 20:42:23.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"Ic01a06f2bd588f7b0ade74403393f52e96f25432","subject":"Restrict code_sources and dynamic_actions policies to admin only","status":"MERGED","created":"2026-06-03 15:53:47.000000000","updated":"2026-06-11 20:44:36.000000000","submitted":"2026-06-11 20:42:23.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":2,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"991453-unmaintained-2024.1-OSSA-2026-020","meta_rev_id":"28d4fb75a124bf85dae8fe48561c888e577976bd","_number":991453,"virtual_id_number":991453,"owner":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-06-11 20:42:22.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},"all":[{"value":2,"date":"2026-06-11 18:40:11.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},"all":[{"value":1,"date":"2026-06-11 18:40:11.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"CC":[{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-06-03 15:53:47.000000000","updated_by":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"reviewer":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"state":"REVIEWER"},{"updated":"2026-06-03 16:58:00.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-06-04 07:00:51.000000000","updated_by":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"reviewer":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"state":"CC"},{"updated":"2026-06-04 08:08:05.000000000","updated_by":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"reviewer":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"state":"REVIEWER"},{"updated":"2026-06-04 08:25:50.000000000","updated_by":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"reviewer":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"state":"CC"},{"updated":"2026-06-04 09:38:06.000000000","updated_by":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"reviewer":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"state":"REVIEWER"},{"updated":"2026-06-04 12:25:31.000000000","updated_by":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"reviewer":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"state":"CC"},{"updated":"2026-06-04 13:32:29.000000000","updated_by":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"reviewer":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"state":"REVIEWER"},{"updated":"2026-06-11 09:22:05.000000000","updated_by":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},"reviewer":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"state":"CC"},{"updated":"2026-06-11 18:40:11.000000000","updated_by":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},"reviewer":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},"state":"REVIEWER"}],"messages":[{"id":"82718fe073507758be53b7d6a6cedb0d7915c3bf","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"date":"2026-06-03 15:53:47.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"66f6e164fb6a143ac5b7b03ac862fc2cc216749f","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-03 16:58:00.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/9829d8a4f89349c3b530adb6b8162932\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/d82fdad0118043c4b3892de1f5b58e93 : SUCCESS in 5m 36s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/383c784fc7df4e7483cceb678235a102 : SUCCESS in 16m 06s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/fcd5709d3f3943f08f53d451df9f8452 : FAILURE in 3m 46s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/1073e7cb33bf454f9262063572629992 : FAILURE in 3m 58s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/2b7ecd72f2274394a05e93434fc9d8c2 : SUCCESS in 5m 22s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/a171e4d1133a41c59aec583b575a97ff : FAILURE in 6m 29s (non-voting)\n- mistral-devstack https://zuul.opendev.org/t/openstack/build/637bac1b436646a49722276a7981f357 : FAILURE in 18m 47s\n- mistral-devstack-tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/8dc62ec5b7c8492682f9e628278041e2 : FAILURE in 33m 15s\n- mistral-devstack-non-apache-tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/5cae861ee4834d62af5431c1e20e69c6 : FAILURE in 31m 08s\n- mistral-devstack-non-apache https://zuul.opendev.org/t/openstack/build/630fb8d13cd5436f806c3f5373cd7532 : FAILURE in 20m 34s\n- mistral-devstack-kombu https://zuul.opendev.org/t/openstack/build/acc68a0528eb467c9446df1fec4c1e77 : FAILURE in 34m 18s\n- mistral-tox-unit-mysql https://zuul.opendev.org/t/openstack/build/806088ca9ba547169d8f72b1ba3cd293 : FAILURE in 6m 45s\n- mistral-tox-unit-postgresql https://zuul.opendev.org/t/openstack/build/63375c228e8045e382b3b49496b3a904 : FAILURE in 7m 26s\n- mistral-rally-task https://zuul.opendev.org/t/openstack/build/344c5e842c5c44c591771b0ae5fdc65f : FAILURE in 17m 47s (non-voting)","accounts_in_message":[],"_revision_number":1},{"id":"2cf31a7a032a0e3a357f1eb83243ba832ced3f7b","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"date":"2026-06-04 07:00:51.000000000","message":"Uploaded patch set 2: Patch Set 1 was rebased.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":2},{"id":"a89f638f1dd0056b87382dd577aeda225356e79f","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-04 08:01:20.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/7cb5ce008a844564aad3fe1bc0fa3b8d\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/8fbf45d60c234da7a768fbe9c373edfa : SUCCESS in 4m 05s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/aa9987bf1c6e45ba96cbd7ac78a89dd2 : SUCCESS in 11m 44s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/736b7e5b85764e30a000c4577ffbe0ed : SUCCESS in 13m 02s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/60111f2a2cc54d9da45d5e5ad2f8bddb : FAILURE in 3m 22s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/5e98da8a442f4459a3084cd48922ed63 : SUCCESS in 3m 47s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/eccbd0d9cfa64544af3a329646c17548 : SUCCESS in 20m 00s (non-voting)\n- mistral-devstack https://zuul.opendev.org/t/openstack/build/7cf3b5e6d92d4506832446f7c0fc6b9d : FAILURE in 25m 00s\n- mistral-devstack-tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/a56e6279816c49019eac28ff640c6d9a : FAILURE in 32m 48s\n- mistral-devstack-non-apache-tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/16982bbaaa044e02a319cc42bdb29f46 : FAILURE in 15m 35s\n- mistral-devstack-non-apache https://zuul.opendev.org/t/openstack/build/49c4e24ce80049d18dab668d04a5a9b7 : FAILURE in 27m 57s\n- mistral-devstack-kombu https://zuul.opendev.org/t/openstack/build/6e57aacda210420fa3f342c8667fd661 : FAILURE in 33m 38s\n- mistral-tox-unit-mysql https://zuul.opendev.org/t/openstack/build/856bfe6b84624bc58289e3341762b552 : SUCCESS in 42m 48s\n- mistral-tox-unit-postgresql https://zuul.opendev.org/t/openstack/build/f2e0ec855b4342ada66a5a548b22d778 : SUCCESS in 53m 45s\n- mistral-rally-task https://zuul.opendev.org/t/openstack/build/cce6487010f94904b89e0868b5aeb9d9 : FAILURE in 9m 47s (non-voting)","accounts_in_message":[],"_revision_number":2},{"id":"65bdc6c8f89dd8a7ef6acc43a524f4d8325c8aee","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"date":"2026-06-04 08:08:05.000000000","message":"Uploaded patch set 3: Patch Set 2 was rebased.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":3},{"id":"0e4d296c5ed42a9a00a5bcc0c8591886a835a9ad","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"date":"2026-06-04 08:25:50.000000000","message":"Uploaded patch set 4: Patch Set 3 was rebased.","accounts_in_message":[],"_revision_number":4},{"id":"b3900644f72d5efb75a3f1ef7524b86ba31f510a","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-04 09:28:33.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/60a89ca25b624096875851e324ca81bc\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/a25849fffa8c46e58641ecb4b883930e : SUCCESS in 4m 55s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/8dbd855b4fcc44f887f6448914152015 : SUCCESS in 14m 12s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/7dd4e187217a4a85a08a2450f6178cce : SUCCESS in 10m 23s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/161e48742d3d4b6ebec6a2c1e3dd035f : SUCCESS in 6m 48s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/4ceb0171944a4aa3b56424237ac0686e : SUCCESS in 3m 35s\n- mistral-tox-unit-mysql https://zuul.opendev.org/t/openstack/build/b915e17e3fbf4aaeb1b55f72f802b147 : SUCCESS in 38m 24s\n- mistral-tox-unit-postgresql https://zuul.opendev.org/t/openstack/build/520590903cd542aebb7ed114a0c42648 : SUCCESS in 51m 30s","accounts_in_message":[],"_revision_number":4},{"id":"9ecc996aaa7c25e58a3ea1a8f459edacd1818003","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"date":"2026-06-04 09:38:06.000000000","message":"Uploaded patch set 5: Patch Set 4 was rebased.\n\nOutdated Votes:\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":5},{"id":"e3f792d980b797f78e0ac103ac6d372276df220e","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-04 10:43:23.000000000","message":"Patch Set 5: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/8b31a003527f4415a869533a6cd4e709\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/f50db6c3e4ee4c89ad2feed3b5617266 : SUCCESS in 5m 00s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/21acd70eef70422b878202672847a692 : SUCCESS in 16m 27s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/f7dcfa41be3c435298b56e84c8a44135 : SUCCESS in 10m 23s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/5d6a01698f584b329a5dd9676432c7f3 : SUCCESS in 5m 13s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/4daea1ca16934c1795e0774454e97e43 : SUCCESS in 6m 35s\n- mistral-tox-unit-mysql https://zuul.opendev.org/t/openstack/build/98d396bef31747a5a7c7e6ab20ce7201 : FAILURE in 37m 05s\n- mistral-tox-unit-postgresql https://zuul.opendev.org/t/openstack/build/d419e2e7fd3542f392896fa29e163f7a : SUCCESS in 53m 25s","accounts_in_message":[],"_revision_number":5},{"id":"fdcca7cab67e446cd041a6c1f2ff5cd6a3d09110","author":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"date":"2026-06-04 12:18:16.000000000","message":"Patch Set 5:\n\n(1 comment)","accounts_in_message":[],"_revision_number":5},{"id":"7972374d12d3a6532cc3bd6092a8836ceb7a741f","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"date":"2026-06-04 12:25:31.000000000","message":"Uploaded patch set 6: Patch Set 5 was rebased.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":6},{"id":"6a0f5a5bcd5018d599f00b47cd068acc5d02463c","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-04 12:55:36.000000000","message":"Patch Set 6: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/769ef29fe72944339f74dc081d2211eb\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/91708d4747ad4453986bba87eec4b316 : SUCCESS in 4m 26s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/8fdb9165cbbc4e88938e5b9dced47392 : SUCCESS in 15m 40s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/ff26bc3b3e4f48fe9ce08a943d84f048 : SUCCESS in 12m 08s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/8a7385aa6b3a4b6fa765a31b03f91a2d : SUCCESS in 7m 24s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/353df28a2b334e4f93d5d4a252e13cf5 : SUCCESS in 4m 15s","accounts_in_message":[],"_revision_number":6},{"id":"d1a021ac08212fe883b8e57413b32109bc97b876","author":{"_account_id":11583,"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","username":"arnaudmorin"},"date":"2026-06-04 13:32:29.000000000","message":"Patch Set 6: Code-Review+1","accounts_in_message":[],"_revision_number":6},{"id":"4f2a7df91c52916a4eaacf33a9e70f01480d232f","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},"date":"2026-06-11 09:22:05.000000000","message":"Uploaded patch set 7: Patch Set 6 was rebased. Commit message was updated.\n\nOutdated Votes:\n* Code-Review+1 (copy condition: \"changekind:TRIVIAL_REBASE OR is:MIN\")\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":7},{"id":"2d0c27c48ea383d4cf9e5bdba2b32065f3410a17","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-11 10:14:05.000000000","message":"Patch Set 7: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/274f2c6ea3d94b61b1f16c4d4e942c2c\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/e9b2e8674fba449db8d7a31246faa2ad : SUCCESS in 4m 18s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/bb1563c78bb14f868289cc356a1c7aa5 : SUCCESS in 12m 49s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/53b96935a8424f839dda61155d38920d : SUCCESS in 12m 06s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/994a62085f744308836d0802746d1b23 : SUCCESS in 6m 50s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/f3a5dcceff3f4dc28c9bb0ceb914d13c : SUCCESS in 5m 02s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/0f2de64df0ce4590ba157de556d5f060 : SUCCESS in 14m 55s (non-voting)\n- mistral-devstack https://zuul.opendev.org/t/openstack/build/1543b243b92f498e9877e6ff662b6a1e : FAILURE in 23m 37s\n- mistral-devstack-tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/c23c1e2f0e6e4784ae6159b79b0ee5a6 : FAILURE in 35m 20s\n- mistral-devstack-non-apache-tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/9a53966d252b4eaaaeaa44e1c999352d : FAILURE in 44m 44s\n- mistral-devstack-non-apache https://zuul.opendev.org/t/openstack/build/46dd824fb6594074a9f66bc024f64e36 : FAILURE in 20m 37s\n- mistral-devstack-kombu https://zuul.opendev.org/t/openstack/build/60c5afdb9d2147c1b4fc395e38b90913 : FAILURE in 45m 34s","accounts_in_message":[],"_revision_number":7},{"id":"3e3da793675460cb7a27d5404861de68b2799c3c","author":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},"date":"2026-06-11 18:40:11.000000000","message":"Patch Set 7: Code-Review+2 Workflow+1\n\n(1 comment)","accounts_in_message":[],"_revision_number":7},{"id":"3aeff2a09cf579d94c041e43d0d4786318f83308","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-11 19:28:17.000000000","message":"Patch Set 7: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/c052cb6f302e4f3a882406a4a4821be6\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/6ab1d48657ff4e70bb8927bfdf88fd84 : SUCCESS in 3m 30s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/5210c0271bdd46dea25c68ad4ce44716 : SUCCESS in 10m 07s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/6faa65a7ac164ec6936b1dfb422a863c : SUCCESS in 9m 17s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/6feaa4508134449b93d7c32071b11eb6 : SUCCESS in 8m 41s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/0f241bc603c64615991e6d76d3e494a5 : SUCCESS in 4m 32s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/54dc116c23d541b0a6ba2af2afb30642 : SUCCESS in 13m 40s (non-voting)\n- mistral-devstack https://zuul.opendev.org/t/openstack/build/791471d3f1dc46fab88d272cdb460872 : SUCCESS in 40m 46s\n- mistral-devstack-tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/224a6e987d93475491cf7b8bfc319366 : SUCCESS in 22m 05s\n- mistral-devstack-non-apache-tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/d0c7a00f7ebb4faea6112c69de0e93e2 : SUCCESS in 26m 41s\n- mistral-devstack-non-apache https://zuul.opendev.org/t/openstack/build/e8e296a76b3242b885fcdbae8a988862 : SUCCESS in 25m 56s\n- mistral-devstack-kombu https://zuul.opendev.org/t/openstack/build/64f869c4d26349e09022469a00f8fa0f : SUCCESS in 42m 32s","accounts_in_message":[],"_revision_number":7},{"id":"93b3562c53f474ac7516c48dcdfe25a9ff2ac8e2","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-11 19:38:51.000000000","message":"Patch Set 7: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":7},{"id":"a312f5e56827cdfb3a5c5467197b0cac001f2611","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-11 20:42:22.000000000","message":"Patch Set 7: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/866e58300e404a609d047a78a24fedb8\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/e3ddd838c4c14c4bbff274e473800b3a : SUCCESS in 3m 53s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/576c193eb06c4964a92dca165b8594e2 : SUCCESS in 13m 33s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/3a2bfae477fb42a8b00dc41e87943f29 : SUCCESS in 9m 03s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/505562c905c645268fcf3532bafbc86f : SUCCESS in 4m 14s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/df8f4ec3ad864c5b9702fe936dab3ecc : SUCCESS in 4m 44s\n- mistral-devstack https://zuul.opendev.org/t/openstack/build/a7fdafdbd92045729f6aec0804980e3a : SUCCESS in 40m 04s\n- mistral-devstack-tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/2ce8179351a24f77bd094b4652e83aab : SUCCESS in 37m 26s\n- mistral-devstack-non-apache-tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/2c69c5c5141f45439fb1ef4a0514f7f0 : SUCCESS in 45m 47s\n- mistral-devstack-non-apache https://zuul.opendev.org/t/openstack/build/5a1c7e65d9a04e40820e70204cc33e5e : SUCCESS in 32m 16s\n- mistral-devstack-kombu https://zuul.opendev.org/t/openstack/build/75bb1a1616724de083ca84bc18edba92 : SUCCESS in 46m 34s","accounts_in_message":[],"_revision_number":7},{"id":"d6e9c4e15281e527f429f6e2037ee1196cfecf11","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-11 20:42:23.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":7},{"id":"28d4fb75a124bf85dae8fe48561c888e577976bd","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-11 20:44:36.000000000","message":"Patch Set 7:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/a05c21dd4e844acc86f6fb2c25ed15de\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/8b430f67f5594a9c856f03daafce45f3 : SUCCESS in 43s\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/788b4d321e76411fa0bda8a06edb0edd : SUCCESS in 46s","accounts_in_message":[],"_revision_number":7}],"current_revision_number":7,"current_revision":"01bfc783e056469817fe333b8f4dfddf55b49d6a","revisions":{"e39823c5e2a09db90c2baff18362b0cd2c142121":{"kind":"REWORK","_number":1,"created":"2026-06-03 15:53:47.000000000","uploader":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"ref":"refs/changes/53/991453/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/mistral","ref":"refs/changes/53/991453/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/mistral refs/changes/53/991453/1"}}},"commit":{"parents":[{"commit":"c1d1c7810a37abef42f0aa91c3c7c1880f094ed5","subject":"Add code_sources publicize policy and enforcement","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/c1d1c7810a37abef42f0aa91c3c7c1880f094ed5"}]}],"author":{"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","date":"2026-03-30 09:57:27.000000000","tz":120},"committer":{"name":"Tobias Urdin","email":"tobias.urdin@binero.com","date":"2026-06-03 15:49:29.000000000","tz":120},"subject":"Restrict code_sources and dynamic_actions policies to admin only","message":"Restrict code_sources and dynamic_actions policies to admin only\n\nThese APIs previously defaulted to admin_or_owner, allowing any project\nowner to manage code sources and dynamic actions. Restrict all operations\nto admin_only to reduce the attack surface for arbitrary code execution.\n\nRelated-Bug: #2147178\nCo-Authored-By: Claude Opus 4.6 (1M context) \u003cnoreply@anthropic.com\u003e\nSigned-off-by: Arnaud Morin \u003carnaud.morin@gmail.com\u003e\nChange-Id: Ic01a06f2bd588f7b0ade74403393f52e96f25432\n(cherry picked from commit 9cfe4e8ff42919f5ccf9a5c6e1422ef6cdef7487)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/e39823c5e2a09db90c2baff18362b0cd2c142121"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/e39823c5e2a09db90c2baff18362b0cd2c142121"}]},"branch":"refs/heads/unmaintained/2024.1"},"5500334736452e256414990411e6432bcb90ce15":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2026-06-04 07:00:51.000000000","uploader":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"ref":"refs/changes/53/991453/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/mistral","ref":"refs/changes/53/991453/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/mistral refs/changes/53/991453/2"}}},"commit":{"parents":[{"commit":"6afccfcf37d2bc893455376b2a52cff0faeb838f","subject":"Add code_sources publicize policy and enforcement","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/6afccfcf37d2bc893455376b2a52cff0faeb838f"}]}],"author":{"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","date":"2026-03-30 09:57:27.000000000","tz":120},"committer":{"name":"Tobias Urdin","email":"tobias.urdin@binero.com","date":"2026-06-04 07:00:43.000000000","tz":120},"subject":"Restrict code_sources and dynamic_actions policies to admin only","message":"Restrict code_sources and dynamic_actions policies to admin only\n\nThese APIs previously defaulted to admin_or_owner, allowing any project\nowner to manage code sources and dynamic actions. Restrict all operations\nto admin_only to reduce the attack surface for arbitrary code execution.\n\nRelated-Bug: #2147178\nCo-Authored-By: Claude Opus 4.6 (1M context) \u003cnoreply@anthropic.com\u003e\nSigned-off-by: Arnaud Morin \u003carnaud.morin@gmail.com\u003e\nChange-Id: Ic01a06f2bd588f7b0ade74403393f52e96f25432\n(cherry picked from commit 9cfe4e8ff42919f5ccf9a5c6e1422ef6cdef7487)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/5500334736452e256414990411e6432bcb90ce15"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/5500334736452e256414990411e6432bcb90ce15"}]},"branch":"refs/heads/unmaintained/2024.1"},"010ad6f68b7fea8284129273f5cdcf501b8aa29e":{"kind":"TRIVIAL_REBASE","_number":3,"created":"2026-06-04 08:08:05.000000000","uploader":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"ref":"refs/changes/53/991453/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/mistral","ref":"refs/changes/53/991453/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/mistral refs/changes/53/991453/3"}}},"commit":{"parents":[{"commit":"9a3d0c59654e0a915d0d9a72599d3ea0211a3c26","subject":"Add code_sources publicize policy and enforcement","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/9a3d0c59654e0a915d0d9a72599d3ea0211a3c26"}]}],"author":{"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","date":"2026-03-30 09:57:27.000000000","tz":120},"committer":{"name":"Tobias Urdin","email":"tobias.urdin@binero.com","date":"2026-06-04 08:07:56.000000000","tz":120},"subject":"Restrict code_sources and dynamic_actions policies to admin only","message":"Restrict code_sources and dynamic_actions policies to admin only\n\nThese APIs previously defaulted to admin_or_owner, allowing any project\nowner to manage code sources and dynamic actions. Restrict all operations\nto admin_only to reduce the attack surface for arbitrary code execution.\n\nRelated-Bug: #2147178\nCo-Authored-By: Claude Opus 4.6 (1M context) \u003cnoreply@anthropic.com\u003e\nSigned-off-by: Arnaud Morin \u003carnaud.morin@gmail.com\u003e\nChange-Id: Ic01a06f2bd588f7b0ade74403393f52e96f25432\n(cherry picked from commit 9cfe4e8ff42919f5ccf9a5c6e1422ef6cdef7487)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/010ad6f68b7fea8284129273f5cdcf501b8aa29e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/010ad6f68b7fea8284129273f5cdcf501b8aa29e"}]},"branch":"refs/heads/unmaintained/2024.1"},"e1e9cd0359945fb13a1cf9a69aa477fa6021723d":{"kind":"TRIVIAL_REBASE","_number":4,"created":"2026-06-04 08:25:50.000000000","uploader":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"ref":"refs/changes/53/991453/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/mistral","ref":"refs/changes/53/991453/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/mistral refs/changes/53/991453/4"}}},"commit":{"parents":[{"commit":"8af00c6146cc9cecf6aa10fa34a30d9587e15b4f","subject":"Add code_sources publicize policy and enforcement","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/8af00c6146cc9cecf6aa10fa34a30d9587e15b4f"}]}],"author":{"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","date":"2026-03-30 09:57:27.000000000","tz":120},"committer":{"name":"Tobias Urdin","email":"tobias.urdin@binero.com","date":"2026-06-04 08:25:25.000000000","tz":120},"subject":"Restrict code_sources and dynamic_actions policies to admin only","message":"Restrict code_sources and dynamic_actions policies to admin only\n\nThese APIs previously defaulted to admin_or_owner, allowing any project\nowner to manage code sources and dynamic actions. Restrict all operations\nto admin_only to reduce the attack surface for arbitrary code execution.\n\nRelated-Bug: #2147178\nCo-Authored-By: Claude Opus 4.6 (1M context) \u003cnoreply@anthropic.com\u003e\nSigned-off-by: Arnaud Morin \u003carnaud.morin@gmail.com\u003e\nChange-Id: Ic01a06f2bd588f7b0ade74403393f52e96f25432\n(cherry picked from commit 9cfe4e8ff42919f5ccf9a5c6e1422ef6cdef7487)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/e1e9cd0359945fb13a1cf9a69aa477fa6021723d"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/e1e9cd0359945fb13a1cf9a69aa477fa6021723d"}]},"branch":"refs/heads/unmaintained/2024.1"},"2e08a49587dbf129a68702b0072fc7b9f5f503ce":{"kind":"TRIVIAL_REBASE","_number":5,"created":"2026-06-04 09:38:06.000000000","uploader":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"ref":"refs/changes/53/991453/5","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/mistral","ref":"refs/changes/53/991453/5","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/5 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/5 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/5 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/mistral refs/changes/53/991453/5"}}},"commit":{"parents":[{"commit":"d34b21633e38b66c50687e7b683c3d7393cf5567","subject":"Add code_sources publicize policy and enforcement","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/d34b21633e38b66c50687e7b683c3d7393cf5567"}]}],"author":{"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","date":"2026-03-30 09:57:27.000000000","tz":120},"committer":{"name":"Tobias Urdin","email":"tobias.urdin@binero.com","date":"2026-06-04 09:37:57.000000000","tz":120},"subject":"Restrict code_sources and dynamic_actions policies to admin only","message":"Restrict code_sources and dynamic_actions policies to admin only\n\nThese APIs previously defaulted to admin_or_owner, allowing any project\nowner to manage code sources and dynamic actions. Restrict all operations\nto admin_only to reduce the attack surface for arbitrary code execution.\n\nRelated-Bug: #2147178\nCo-Authored-By: Claude Opus 4.6 (1M context) \u003cnoreply@anthropic.com\u003e\nSigned-off-by: Arnaud Morin \u003carnaud.morin@gmail.com\u003e\nChange-Id: Ic01a06f2bd588f7b0ade74403393f52e96f25432\n(cherry picked from commit 9cfe4e8ff42919f5ccf9a5c6e1422ef6cdef7487)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/2e08a49587dbf129a68702b0072fc7b9f5f503ce"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/2e08a49587dbf129a68702b0072fc7b9f5f503ce"}]},"branch":"refs/heads/unmaintained/2024.1"},"a88dfa20e4710d9e3d9e02848e475ef8b1e9bd94":{"kind":"TRIVIAL_REBASE","_number":6,"created":"2026-06-04 12:25:31.000000000","uploader":{"_account_id":16137,"name":"Tobias Urdin","email":"tobias.urdin@binero.com","username":"tobasco"},"ref":"refs/changes/53/991453/6","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/mistral","ref":"refs/changes/53/991453/6","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/6 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/6 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/6 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/mistral refs/changes/53/991453/6"}}},"commit":{"parents":[{"commit":"7b6135206d07de4b4fc8fa57281a382e0277f9f4","subject":"Add code_sources publicize policy and enforcement","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/7b6135206d07de4b4fc8fa57281a382e0277f9f4"}]}],"author":{"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","date":"2026-03-30 09:57:27.000000000","tz":120},"committer":{"name":"Tobias Urdin","email":"tobias.urdin@binero.com","date":"2026-06-04 12:25:23.000000000","tz":120},"subject":"Restrict code_sources and dynamic_actions policies to admin only","message":"Restrict code_sources and dynamic_actions policies to admin only\n\nThese APIs previously defaulted to admin_or_owner, allowing any project\nowner to manage code sources and dynamic actions. Restrict all operations\nto admin_only to reduce the attack surface for arbitrary code execution.\n\nRelated-Bug: #2147178\nCo-Authored-By: Claude Opus 4.6 (1M context) \u003cnoreply@anthropic.com\u003e\nSigned-off-by: Arnaud Morin \u003carnaud.morin@gmail.com\u003e\nChange-Id: Ic01a06f2bd588f7b0ade74403393f52e96f25432\n(cherry picked from commit 9cfe4e8ff42919f5ccf9a5c6e1422ef6cdef7487)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/a88dfa20e4710d9e3d9e02848e475ef8b1e9bd94"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/a88dfa20e4710d9e3d9e02848e475ef8b1e9bd94"}]},"branch":"refs/heads/unmaintained/2024.1"},"01bfc783e056469817fe333b8f4dfddf55b49d6a":{"kind":"TRIVIAL_REBASE_WITH_MESSAGE_UPDATE","_number":7,"created":"2026-06-11 09:22:05.000000000","uploader":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},"ref":"refs/changes/53/991453/7","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/mistral","ref":"refs/changes/53/991453/7","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/7 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/7 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/mistral refs/changes/53/991453/7 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/mistral refs/changes/53/991453/7"}}},"commit":{"parents":[{"commit":"3d4dc7673c928d9ae4602750f83ebe7209633e41","subject":"Add code_sources publicize policy and enforcement","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/3d4dc7673c928d9ae4602750f83ebe7209633e41"}]}],"author":{"name":"Arnaud Morin","email":"arnaud.morin@gmail.com","date":"2026-03-30 09:57:27.000000000","tz":120},"committer":{"name":"Elod Illes","email":"elod.illes@est.tech","date":"2026-06-11 09:17:50.000000000","tz":120},"subject":"Restrict code_sources and dynamic_actions policies to admin only","message":"Restrict code_sources and dynamic_actions policies to admin only\n\nThese APIs previously defaulted to admin_or_owner, allowing any project\nowner to manage code sources and dynamic actions. Restrict all operations\nto admin_only to reduce the attack surface for arbitrary code execution.\n\nRelated-Bug: #2147178\nCo-Authored-By: Claude Opus 4.6 (1M context) \u003cnoreply@anthropic.com\u003e\nSigned-off-by: Arnaud Morin \u003carnaud.morin@gmail.com\u003e\nChange-Id: Ic01a06f2bd588f7b0ade74403393f52e96f25432\n(cherry picked from commit aedb283674ee41d57b12029dd218b0bd7fee1d9d)\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/01bfc783e056469817fe333b8f4dfddf55b49d6a"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/mistral/commit/01bfc783e056469817fe333b8f4dfddf55b49d6a"}]},"branch":"refs/heads/unmaintained/2024.1"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}