)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"0751f2ee4d767a39bc29113386cbb65705ddd2f9","unresolved":false,"context_lines":[{"line_number":8,"context_line":""},{"line_number":9,"context_line":"WIP: Patches still under review. Will assign an OSSA number when it can"},{"line_number":10,"context_line":"merge. Otherwise ready for review."},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"Change-Id: I5d6d77424eac99a1bb949db360f37601d3cd08a8"},{"line_number":13,"context_line":"Signed-off-by: Jay Faulkner \u003cjay@jvf.cc\u003e"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":4,"id":"711a7202_9d086b60","line":11,"updated":"2026-10-28 19:58:18.000000000","message":"Nit: If you add a Closes-Bug: #2171814 trailer here, automation will update the OSSA bugtask once this merges.","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"}],"/PATCHSET_LEVEL":[{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"68ef264cd6f523d4b63ace8b8dfc01be360cb5b4","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":6,"id":"ef7b90a5_9de0f890","updated":"2026-10-28 22:47:24.000000000","message":"LGTM, please merge and announce when you\u0027re ready tomorrow!","commit_id":"f7e521472d3292ae029fc847b1caff65739fe84a"}],"ossa/OSSA-2026-049.yaml":[{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"af2755416125dba4fc0a5b1346dbfd8495a20c05","unresolved":true,"context_lines":[{"line_number":2,"context_line":""},{"line_number":3,"context_line":"id: OSSA-2026-049"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"title: Ironic Condcutor DoS via gzip bomb configdrive"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"description: |"},{"line_number":8,"context_line":"  Jay Faulkner of G-Research Open Source Software reported a vulnerability"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"25adf0ff_1119ddf3","line":5,"range":{"start_line":5,"start_character":14,"end_line":5,"end_character":23},"updated":"2026-10-28 22:35:02.000000000","message":"typo :(","commit_id":"a6689c455dbb5c72eef960bbc17a3d24ec5396b4"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"4ade4d8deb0db9afc70e69331368b9f0d65f6298","unresolved":false,"context_lines":[{"line_number":2,"context_line":""},{"line_number":3,"context_line":"id: OSSA-2026-049"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"title: Ironic Condcutor DoS via gzip bomb configdrive"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"description: |"},{"line_number":8,"context_line":"  Jay Faulkner of G-Research Open Source Software reported a vulnerability"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"f817f241_8fc93b13","line":5,"range":{"start_line":5,"start_character":14,"end_line":5,"end_character":23},"in_reply_to":"25adf0ff_1119ddf3","updated":"2026-10-28 22:37:47.000000000","message":"Done","commit_id":"a6689c455dbb5c72eef960bbc17a3d24ec5396b4"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"af2755416125dba4fc0a5b1346dbfd8495a20c05","unresolved":true,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"description: |"},{"line_number":8,"context_line":"  Jay Faulkner of G-Research Open Source Software reported a vulnerability"},{"line_number":9,"context_line":"  in the Ironic condcutor. The Ironic conductor can be subjected to an out"},{"line_number":10,"context_line":"  of memory or disk full condition when attempting to extract a"},{"line_number":11,"context_line":"  base64-encoded, gzipped configdrive image submitted via"},{"line_number":12,"context_line":"  ``/v1/nodes/provision_state`` when deploying a node."}],"source_content_type":"text/x-yaml","patch_set":5,"id":"31a497ce_5706f6f3","line":9,"range":{"start_line":9,"start_character":16,"end_line":9,"end_character":25},"updated":"2026-10-28 22:35:02.000000000","message":"typo","commit_id":"a6689c455dbb5c72eef960bbc17a3d24ec5396b4"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"4ade4d8deb0db9afc70e69331368b9f0d65f6298","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"description: |"},{"line_number":8,"context_line":"  Jay Faulkner of G-Research Open Source Software reported a vulnerability"},{"line_number":9,"context_line":"  in the Ironic condcutor. The Ironic conductor can be subjected to an out"},{"line_number":10,"context_line":"  of memory or disk full condition when attempting to extract a"},{"line_number":11,"context_line":"  base64-encoded, gzipped configdrive image submitted via"},{"line_number":12,"context_line":"  ``/v1/nodes/provision_state`` when deploying a node."}],"source_content_type":"text/x-yaml","patch_set":5,"id":"6bbca246_ddfc6aa5","line":9,"range":{"start_line":9,"start_character":16,"end_line":9,"end_character":25},"in_reply_to":"31a497ce_5706f6f3","updated":"2026-10-28 22:37:47.000000000","message":"Done","commit_id":"a6689c455dbb5c72eef960bbc17a3d24ec5396b4"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"af2755416125dba4fc0a5b1346dbfd8495a20c05","unresolved":true,"context_lines":[{"line_number":60,"context_line":"notes:"},{"line_number":61,"context_line":"  - Patches for unmaintained/2024.1, bugfix/38.0, and bugfix/37.0 will be"},{"line_number":62,"context_line":"    merged to git but no new release will be provided."},{"line_number":63,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":5,"id":"082fddce_18bcc0b4","line":63,"updated":"2026-10-28 22:35:02.000000000","message":"drop blank line","commit_id":"a6689c455dbb5c72eef960bbc17a3d24ec5396b4"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"4ade4d8deb0db9afc70e69331368b9f0d65f6298","unresolved":false,"context_lines":[{"line_number":60,"context_line":"notes:"},{"line_number":61,"context_line":"  - Patches for unmaintained/2024.1, bugfix/38.0, and bugfix/37.0 will be"},{"line_number":62,"context_line":"    merged to git but no new release will be provided."},{"line_number":63,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":5,"id":"4484cd89_4e8ba74f","line":63,"in_reply_to":"082fddce_18bcc0b4","updated":"2026-10-28 22:37:47.000000000","message":"Done","commit_id":"a6689c455dbb5c72eef960bbc17a3d24ec5396b4"}],"ossa/OSSA-2026-999.yaml":[{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"38154302c85c60225efed06e48725801fd42f782","unresolved":false,"context_lines":[{"line_number":20,"context_line":"    version: \u0027\u003e\u003d30.0.0 \u003c\u003d32.1.1, \u003e33.0.0 \u003c\u003d35.1.1, \u003e36.0.0 \u003c\u003d39.0.1\u0027"},{"line_number":21,"context_line":""},{"line_number":22,"context_line":"vulnerabilities:"},{"line_number":23,"context_line":"  - cve-id: CVE-2026-PENDING"},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"reporters:"},{"line_number":26,"context_line":"  - name: Jay Faulkner"}],"source_content_type":"text/x-yaml","patch_set":3,"id":"8c5a1324_ba6bce65","line":23,"updated":"2026-10-23 13:55:33.000000000","message":"Per the most recent bug update, it looks like this got CVE-2026-115638 assigned.","commit_id":"b186de9d1a977069b97de9e1e0b78b8f8ada8808"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"43ff1fce7adb82d32922239f7b60005746c47830","unresolved":false,"context_lines":[{"line_number":1,"context_line":"date: 2026-10-XX"},{"line_number":2,"context_line":""},{"line_number":3,"context_line":"id: OSSA-2026-999"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"title: Ironic Condcutor DoS via gzip bomb configdrive"},{"line_number":6,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"192d196d_6207f2bc","line":3,"range":{"start_line":3,"start_character":0,"end_line":3,"end_character":17},"updated":"2026-10-28 22:13:22.000000000","message":"i looked at this and wondered how long i\u0027ve been away for. \n\nor, AIpocalypse just accelerated in a week","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"0751f2ee4d767a39bc29113386cbb65705ddd2f9","unresolved":false,"context_lines":[{"line_number":7,"context_line":"description: |"},{"line_number":8,"context_line":"  Jay Faulkner of G-Research Open Source Software reported a vulnerability"},{"line_number":9,"context_line":"  in the Ironic condcutor. The Ironic conductor can be subjected to an out"},{"line_number":10,"context_line":"  of memory or disk full condition when attempted to extract a"},{"line_number":11,"context_line":"  base64-encoded, gzipped configdrive image submitted via"},{"line_number":12,"context_line":"  ``/v1/nodes/provision_state`` when deploying a node."},{"line_number":13,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"2c360f52_e694c38b","line":10,"updated":"2026-10-28 19:58:18.000000000","message":"Grammar nit: Tense disagreement, \"attemptING\" maybe?","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"43ff1fce7adb82d32922239f7b60005746c47830","unresolved":true,"context_lines":[{"line_number":7,"context_line":"description: |"},{"line_number":8,"context_line":"  Jay Faulkner of G-Research Open Source Software reported a vulnerability"},{"line_number":9,"context_line":"  in the Ironic condcutor. The Ironic conductor can be subjected to an out"},{"line_number":10,"context_line":"  of memory or disk full condition when attempted to extract a"},{"line_number":11,"context_line":"  base64-encoded, gzipped configdrive image submitted via"},{"line_number":12,"context_line":"  ``/v1/nodes/provision_state`` when deploying a node."},{"line_number":13,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"e7f0efed_f3f3858c","line":10,"in_reply_to":"2c360f52_e694c38b","updated":"2026-10-28 22:13:22.000000000","message":"+1 worth fixing","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"d571a80c8f3a4350a2b1f4f3956c7b929dd49062","unresolved":false,"context_lines":[{"line_number":7,"context_line":"description: |"},{"line_number":8,"context_line":"  Jay Faulkner of G-Research Open Source Software reported a vulnerability"},{"line_number":9,"context_line":"  in the Ironic condcutor. The Ironic conductor can be subjected to an out"},{"line_number":10,"context_line":"  of memory or disk full condition when attempted to extract a"},{"line_number":11,"context_line":"  base64-encoded, gzipped configdrive image submitted via"},{"line_number":12,"context_line":"  ``/v1/nodes/provision_state`` when deploying a node."},{"line_number":13,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"8447c384_8b6019c4","line":10,"in_reply_to":"e7f0efed_f3f3858c","updated":"2026-10-28 22:24:09.000000000","message":"Done","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"0751f2ee4d767a39bc29113386cbb65705ddd2f9","unresolved":false,"context_lines":[{"line_number":12,"context_line":"  ``/v1/nodes/provision_state`` when deploying a node."},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"  This issue impacts environments where users have access to deploy"},{"line_number":15,"context_line":"  instances directly via Ironic. "},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"affected-products:"},{"line_number":18,"context_line":"  - product: ironic"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"9c202959_687bda72","line":15,"updated":"2026-10-28 19:58:18.000000000","message":"Nit: Trailing whitespace.","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"d571a80c8f3a4350a2b1f4f3956c7b929dd49062","unresolved":false,"context_lines":[{"line_number":12,"context_line":"  ``/v1/nodes/provision_state`` when deploying a node."},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"  This issue impacts environments where users have access to deploy"},{"line_number":15,"context_line":"  instances directly via Ironic. "},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"affected-products:"},{"line_number":18,"context_line":"  - product: ironic"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"61e2a45e_f27d2c3c","line":15,"in_reply_to":"9c202959_687bda72","updated":"2026-10-28 22:24:09.000000000","message":"done","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"0751f2ee4d767a39bc29113386cbb65705ddd2f9","unresolved":false,"context_lines":[{"line_number":16,"context_line":""},{"line_number":17,"context_line":"affected-products:"},{"line_number":18,"context_line":"  - product: ironic"},{"line_number":19,"context_line":"    version: \u0027\u003e\u003d16.2.0 \u003c\u003d29.1.0, \u003e\u003d30.0.0 \u003c\u003d32.1.0, \u003e33.0.0 \u003c\u003d35.1.0, \u003e36.0.0 \u003c\u003d39.0.0\u0027"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"vulnerabilities:"},{"line_number":22,"context_line":"  - cve-id: CVE-2026-115638"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"6d9a7dc3_ca2f306b","line":19,"updated":"2026-10-28 19:58:18.000000000","message":"Nit: We typically do \u003c the next possible version rather than \u003c\u003d the last affected version for clarity (historical reasons being that projects which make milestone and rc versions technically sort after the \u003c\u003d but could still contain the defect), so this would be e.g. \u003c29.1.1 and so on.\n\nI see you\u0027re covering stable/2025.1 versions here, but since have held back itslong-overdue EOL in Ia4eb190fa67e97679729493a574ba41a91e13190 that should be fine. Oh, I see you also included a note about this at the end, but maybe the note is unnecessary since you\u0027ve got the EOL change on hold for this anyway?","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"43ff1fce7adb82d32922239f7b60005746c47830","unresolved":true,"context_lines":[{"line_number":16,"context_line":""},{"line_number":17,"context_line":"affected-products:"},{"line_number":18,"context_line":"  - product: ironic"},{"line_number":19,"context_line":"    version: \u0027\u003e\u003d16.2.0 \u003c\u003d29.1.0, \u003e\u003d30.0.0 \u003c\u003d32.1.0, \u003e33.0.0 \u003c\u003d35.1.0, \u003e36.0.0 \u003c\u003d39.0.0\u0027"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"vulnerabilities:"},{"line_number":22,"context_line":"  - cve-id: CVE-2026-115638"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"678e0efd_a9389c2b","line":19,"range":{"start_line":19,"start_character":23,"end_line":19,"end_character":31},"updated":"2026-10-28 22:13:22.000000000","message":"agree with fungi, this isn\u0027t a nit however:\n\n\n`\u003e\u003d16.2.0 \u003c29.1.1, \u003e\u003d30.0.0 \u003c32.1.1, \u003e\u003d33.0.0 \u003c35.1.1, \u003e\u003d36.0.0 \u003c39.0.1`\n\n\n(also replaced \"\u003e\" with \"\u003e\u003d\" because 33.0.0, 36.0.0 are both affected as well i presume?)","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"0f62c407401305d4b74a4b70f31ebb28e1321545","unresolved":false,"context_lines":[{"line_number":16,"context_line":""},{"line_number":17,"context_line":"affected-products:"},{"line_number":18,"context_line":"  - product: ironic"},{"line_number":19,"context_line":"    version: \u0027\u003e\u003d16.2.0 \u003c\u003d29.1.0, \u003e\u003d30.0.0 \u003c\u003d32.1.0, \u003e33.0.0 \u003c\u003d35.1.0, \u003e36.0.0 \u003c\u003d39.0.0\u0027"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"vulnerabilities:"},{"line_number":22,"context_line":"  - cve-id: CVE-2026-115638"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"d843f35a_ad6a9244","line":19,"range":{"start_line":19,"start_character":23,"end_line":19,"end_character":31},"in_reply_to":"678e0efd_a9389c2b","updated":"2026-10-28 22:24:24.000000000","message":"Done","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"d571a80c8f3a4350a2b1f4f3956c7b929dd49062","unresolved":false,"context_lines":[{"line_number":16,"context_line":""},{"line_number":17,"context_line":"affected-products:"},{"line_number":18,"context_line":"  - product: ironic"},{"line_number":19,"context_line":"    version: \u0027\u003e\u003d16.2.0 \u003c\u003d29.1.0, \u003e\u003d30.0.0 \u003c\u003d32.1.0, \u003e33.0.0 \u003c\u003d35.1.0, \u003e36.0.0 \u003c\u003d39.0.0\u0027"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"vulnerabilities:"},{"line_number":22,"context_line":"  - cve-id: CVE-2026-115638"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"1744f9ff_414c38ae","line":19,"in_reply_to":"6d9a7dc3_ca2f306b","updated":"2026-10-28 22:24:09.000000000","message":"So a couple of notes:\n\nThat release was originally being held for OSSA 46/47 which were out last Thursday.\n\nI\u0027ve proposed a 2025.1 release now, but still unsure if it\u0027ll be in time.","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"b1315d3cbfb35ad0c7a49f32664ffafb18e01998","unresolved":false,"context_lines":[{"line_number":34,"context_line":"reviews:"},{"line_number":35,"context_line":"  2027.1/indri (development):"},{"line_number":36,"context_line":"    - https://review.opendev.org/1011906"},{"line_number":37,"context_line":"    - https://review.opendev.org/1012743"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"  2026.2/hibiscus:"},{"line_number":40,"context_line":"    - https://review.opendev.org/1012122"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"ab624c36_1221886e","line":37,"updated":"2026-10-28 20:06:18.000000000","message":"Nit: Oh, and it\u0027s probably not necessary to include a change that merely expands on the wording in the release note, especially since it\u0027s for the development branch, not actually a maintained stable branch.","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"d571a80c8f3a4350a2b1f4f3956c7b929dd49062","unresolved":true,"context_lines":[{"line_number":34,"context_line":"reviews:"},{"line_number":35,"context_line":"  2027.1/indri (development):"},{"line_number":36,"context_line":"    - https://review.opendev.org/1011906"},{"line_number":37,"context_line":"    - https://review.opendev.org/1012743"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"  2026.2/hibiscus:"},{"line_number":40,"context_line":"    - https://review.opendev.org/1012122"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"61ca97d2_4af52c76","line":37,"in_reply_to":"76fe38e6_0f96774d","updated":"2026-10-28 22:24:09.000000000","message":"I\u0027m gonna stand my ground on this one: I want readers to know the release note was revised, because that prevents someone from reading the release note on master, assuming they are OK (it didn\u0027t cover all the vulnerable cases) and skipping the update.","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"43ff1fce7adb82d32922239f7b60005746c47830","unresolved":true,"context_lines":[{"line_number":34,"context_line":"reviews:"},{"line_number":35,"context_line":"  2027.1/indri (development):"},{"line_number":36,"context_line":"    - https://review.opendev.org/1011906"},{"line_number":37,"context_line":"    - https://review.opendev.org/1012743"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"  2026.2/hibiscus:"},{"line_number":40,"context_line":"    - https://review.opendev.org/1012122"}],"source_content_type":"text/x-yaml","patch_set":4,"id":"76fe38e6_0f96774d","line":37,"in_reply_to":"ab624c36_1221886e","updated":"2026-10-28 22:13:22.000000000","message":"+1 release notes are documentation, and this could be confusing to convey..","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"0751f2ee4d767a39bc29113386cbb65705ddd2f9","unresolved":false,"context_lines":[{"line_number":58,"context_line":"    - https://review.opendev.org/1012133"},{"line_number":59,"context_line":""},{"line_number":60,"context_line":"notes:"},{"line_number":61,"context_line":"  - Patches for bugfix/38.0 and bugfix/37.0 will be merged to git but no new"},{"line_number":62,"context_line":"    release will be provided. Similarly, stable/2025.1 is nearing end of"},{"line_number":63,"context_line":"    maintenance and may not have a release issued in time to include this fix."},{"line_number":64,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"cc5e93d0_59a6c1a8","line":61,"updated":"2026-10-28 19:58:18.000000000","message":"Nit: also unmaintained/2024.1?","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"0f62c407401305d4b74a4b70f31ebb28e1321545","unresolved":false,"context_lines":[{"line_number":58,"context_line":"    - https://review.opendev.org/1012133"},{"line_number":59,"context_line":""},{"line_number":60,"context_line":"notes:"},{"line_number":61,"context_line":"  - Patches for bugfix/38.0 and bugfix/37.0 will be merged to git but no new"},{"line_number":62,"context_line":"    release will be provided. Similarly, stable/2025.1 is nearing end of"},{"line_number":63,"context_line":"    maintenance and may not have a release issued in time to include this fix."},{"line_number":64,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"18db0806_f3a3e291","line":61,"in_reply_to":"99a9e391_57114c7a","updated":"2026-10-28 22:24:24.000000000","message":"Done","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"d571a80c8f3a4350a2b1f4f3956c7b929dd49062","unresolved":true,"context_lines":[{"line_number":58,"context_line":"    - https://review.opendev.org/1012133"},{"line_number":59,"context_line":""},{"line_number":60,"context_line":"notes:"},{"line_number":61,"context_line":"  - Patches for bugfix/38.0 and bugfix/37.0 will be merged to git but no new"},{"line_number":62,"context_line":"    release will be provided. Similarly, stable/2025.1 is nearing end of"},{"line_number":63,"context_line":"    maintenance and may not have a release issued in time to include this fix."},{"line_number":64,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"99a9e391_57114c7a","line":61,"in_reply_to":"cc5e93d0_59a6c1a8","updated":"2026-10-28 22:24:09.000000000","message":"done","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"43ff1fce7adb82d32922239f7b60005746c47830","unresolved":true,"context_lines":[{"line_number":59,"context_line":""},{"line_number":60,"context_line":"notes:"},{"line_number":61,"context_line":"  - Patches for bugfix/38.0 and bugfix/37.0 will be merged to git but no new"},{"line_number":62,"context_line":"    release will be provided. Similarly, stable/2025.1 is nearing end of"},{"line_number":63,"context_line":"    maintenance and may not have a release issued in time to include this fix."},{"line_number":64,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"bae438f6_c8ff0ca2","line":63,"range":{"start_line":62,"start_character":30,"end_line":63,"end_character":78},"updated":"2026-10-28 22:13:22.000000000","message":"I suggest being definitive about this. It should be possible to tag a release and sunset the branch..","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"0f62c407401305d4b74a4b70f31ebb28e1321545","unresolved":false,"context_lines":[{"line_number":59,"context_line":""},{"line_number":60,"context_line":"notes:"},{"line_number":61,"context_line":"  - Patches for bugfix/38.0 and bugfix/37.0 will be merged to git but no new"},{"line_number":62,"context_line":"    release will be provided. Similarly, stable/2025.1 is nearing end of"},{"line_number":63,"context_line":"    maintenance and may not have a release issued in time to include this fix."},{"line_number":64,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"912557ca_05da187b","line":63,"range":{"start_line":62,"start_character":30,"end_line":63,"end_character":78},"in_reply_to":"10a791c8_bfd3dfea","updated":"2026-10-28 22:24:24.000000000","message":"Done","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"af2755416125dba4fc0a5b1346dbfd8495a20c05","unresolved":false,"context_lines":[{"line_number":59,"context_line":""},{"line_number":60,"context_line":"notes:"},{"line_number":61,"context_line":"  - Patches for bugfix/38.0 and bugfix/37.0 will be merged to git but no new"},{"line_number":62,"context_line":"    release will be provided. Similarly, stable/2025.1 is nearing end of"},{"line_number":63,"context_line":"    maintenance and may not have a release issued in time to include this fix."},{"line_number":64,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"10c5f385_4182f064","line":63,"range":{"start_line":62,"start_character":30,"end_line":63,"end_character":78},"in_reply_to":"912557ca_05da187b","updated":"2026-10-28 22:35:02.000000000","message":"That\u0027s fair. \n\n@elod.illes@est.tech helped tag a final \"CVE\" specific release for manila on Epoxy ; and @fungi@yuggoth.org is aware of this as well.. So i\u0027m for pushing a release as soon as the patch lands and then doing the retirement.","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"d571a80c8f3a4350a2b1f4f3956c7b929dd49062","unresolved":true,"context_lines":[{"line_number":59,"context_line":""},{"line_number":60,"context_line":"notes:"},{"line_number":61,"context_line":"  - Patches for bugfix/38.0 and bugfix/37.0 will be merged to git but no new"},{"line_number":62,"context_line":"    release will be provided. Similarly, stable/2025.1 is nearing end of"},{"line_number":63,"context_line":"    maintenance and may not have a release issued in time to include this fix."},{"line_number":64,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":4,"id":"10a791c8_bfd3dfea","line":63,"range":{"start_line":62,"start_character":30,"end_line":63,"end_character":78},"in_reply_to":"bae438f6_c8ff0ca2","updated":"2026-10-28 22:24:09.000000000","message":"I don\u0027t control all the levers to ensure it happens, but since I\u0027ve proposed the patch I\u0027ll remove this.","commit_id":"f02ac173a8a0661369b88b0debf49b76b36ed304"}]}