)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"a6492b16e6097373f59a8e937299740a33cbce1f","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":5,"id":"d719bc80_3d9b9b45","updated":"2026-05-04 19:18:20.000000000","message":"Hey @cid@gr-oss.io. there\u0027s going to be a OSSA-2026-009 shipping soon.. so this needs to be renumbered. also a comment inline","commit_id":"422b7ee685f64b98bcdfd02fa1f94e0c451412f5"},{"author":{"_account_id":36770,"name":"cid","display_name":"cid","email":"cid@gr-oss.io","username":"cidelight","status":"@gr-oss upstream: Doing good IRONIC things..."},"change_message_id":"2fa895819f2de4bb2be0ff64e098830260b50052","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":5,"id":"5a15aa7a_6a10b54a","in_reply_to":"d719bc80_3d9b9b45","updated":"2026-05-04 19:57:13.000000000","message":"++","commit_id":"422b7ee685f64b98bcdfd02fa1f94e0c451412f5"},{"author":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"change_message_id":"0c92348e8e8599f98ad7391cb9970678e4e5063a","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":6,"id":"4f7ddf16_cdd1462c","updated":"2026-05-05 14:46:19.000000000","message":"Hey folks, I\u0027m okay if this lands as is, but I\u0027d really prefer upfront clarity.","commit_id":"d901cffb355c7aeab2f7a3b7b3edf2d2e08eb732"},{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"27edf8f8612b3cef07b52b3af084156e78208c79","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":6,"id":"b35512af_6d3ef654","updated":"2026-05-04 20:42:11.000000000","message":"Text reads well and renders properly in HTML; one nit noted inline.","commit_id":"d901cffb355c7aeab2f7a3b7b3edf2d2e08eb732"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"809a54f6d7c4d6c88c85eb029b1c3046a3647564","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":6,"id":"095a0304_d5f2a1c2","updated":"2026-05-04 20:15:06.000000000","message":"This looks good, I will announce tomorrow assuming we\u0027re all onboard.","commit_id":"d901cffb355c7aeab2f7a3b7b3edf2d2e08eb732"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"7621338f6ee097b59e836edc4b34cfc8e29fefa9","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":6,"id":"cf87a9c2_ff5184aa","in_reply_to":"4f7ddf16_cdd1462c","updated":"2026-05-05 14:55:11.000000000","message":"I\u0027m pushing a revision before announcement, don\u0027t worry.","commit_id":"d901cffb355c7aeab2f7a3b7b3edf2d2e08eb732"},{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"6d96e2869334d3cf2e9ae8b4cc50e85a412650ac","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":7,"id":"bd8d6c72_0604a3f2","updated":"2026-05-05 15:17:53.000000000","message":"Two minor things noted inline, otherwise LGTM.","commit_id":"7245fcb9045b16ba64c9a6bc3dc5743686a5fd64"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"43a83d54c9a5b630cfb69bd49a2605ab10a27ddc","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":8,"id":"d9716545_eff679d6","updated":"2026-05-05 15:51:02.000000000","message":"LGTM, thank you","commit_id":"c6f14cb7de498a389e9591869964dc8953fa2cd6"},{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"9dcfcb7f9ebf1a01694b5242a0dd4193b1f0d50b","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":8,"id":"fa96952a_3dc3e3bc","updated":"2026-05-05 15:44:51.000000000","message":"Revision LGTM.","commit_id":"c6f14cb7de498a389e9591869964dc8953fa2cd6"}],"ossa/OSSA-2026-009.yaml":[{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"a6492b16e6097373f59a8e937299740a33cbce1f","unresolved":true,"context_lines":[{"line_number":21,"context_line":"    version: \u0027\u003e\u003d17.0.0 \u003c26.1.6, \u003e\u003d27.0.0 \u003c29.0.5, \u003e\u003d30.0.0 \u003c32.0.1, \u003e\u003d33.0.0 \u003c35.0.1\u0027"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"vulnerabilities:"},{"line_number":24,"context_line":"  - cve-id: \u0027CVE-2026-42997\u0027"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"reporters:"},{"line_number":27,"context_line":"  - name: Dmitry Tantsur"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"e5f80cc6_d9d3885c","line":24,"range":{"start_line":24,"start_character":13,"end_line":24,"end_character":27},"updated":"2026-05-04 19:18:20.000000000","message":"Where does this ID come from? you call out that the request is pending.. and i couldn\u0027t find any public mention of CVE-2026-42997, just that it was reserved by a partner CNA\n\nhttps://www.cve.org/CVERecord?id\u003dCVE-2026-42997","commit_id":"422b7ee685f64b98bcdfd02fa1f94e0c451412f5"},{"author":{"_account_id":36770,"name":"cid","display_name":"cid","email":"cid@gr-oss.io","username":"cidelight","status":"@gr-oss upstream: Doing good IRONIC things..."},"change_message_id":"2fa895819f2de4bb2be0ff64e098830260b50052","unresolved":true,"context_lines":[{"line_number":21,"context_line":"    version: \u0027\u003e\u003d17.0.0 \u003c26.1.6, \u003e\u003d27.0.0 \u003c29.0.5, \u003e\u003d30.0.0 \u003c32.0.1, \u003e\u003d33.0.0 \u003c35.0.1\u0027"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"vulnerabilities:"},{"line_number":24,"context_line":"  - cve-id: \u0027CVE-2026-42997\u0027"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"reporters:"},{"line_number":27,"context_line":"  - name: Dmitry Tantsur"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"500769f2_80766e26","line":24,"range":{"start_line":24,"start_character":13,"end_line":24,"end_character":27},"in_reply_to":"e5f80cc6_d9d3885c","updated":"2026-05-04 19:57:13.000000000","message":"This CVE ID was issued by MITRE in response to an email requesting one be created.","commit_id":"422b7ee685f64b98bcdfd02fa1f94e0c451412f5"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"11172c0574fa642f37187a25e867d20287f59505","unresolved":true,"context_lines":[{"line_number":54,"context_line":"    - https://review.opendev.org/c/openstack/ironic/+/986817"},{"line_number":55,"context_line":""},{"line_number":56,"context_line":"notes:"},{"line_number":57,"context_line":"  - CVE Request 2034158 was filed with MITRE on 2026-05-01."},{"line_number":58,"context_line":"  - The molds feature is deprecated and scheduled for removal."}],"source_content_type":"text/x-yaml","patch_set":5,"id":"99aa3b6b_dc48d484","line":57,"updated":"2026-05-04 19:29:58.000000000","message":"We need to remove this note since the CVE number was issued before this was published.","commit_id":"422b7ee685f64b98bcdfd02fa1f94e0c451412f5"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"36cbc3607046aa5edbd73640965a1f6ca2074459","unresolved":true,"context_lines":[{"line_number":55,"context_line":""},{"line_number":56,"context_line":"notes:"},{"line_number":57,"context_line":"  - CVE Request 2034158 was filed with MITRE on 2026-05-01."},{"line_number":58,"context_line":"  - The molds feature is deprecated and scheduled for removal."}],"source_content_type":"text/x-yaml","patch_set":5,"id":"8eda8fcf_85186e01","line":58,"updated":"2026-05-04 19:41:20.000000000","message":"nit: \"The molds feature was deprecated and removed from the current development branch.\"","commit_id":"422b7ee685f64b98bcdfd02fa1f94e0c451412f5"},{"author":{"_account_id":36770,"name":"cid","display_name":"cid","email":"cid@gr-oss.io","username":"cidelight","status":"@gr-oss upstream: Doing good IRONIC things..."},"change_message_id":"83b0b884373d8304ecacc1e22e60ed282a64e0e1","unresolved":false,"context_lines":[{"line_number":55,"context_line":""},{"line_number":56,"context_line":"notes:"},{"line_number":57,"context_line":"  - CVE Request 2034158 was filed with MITRE on 2026-05-01."},{"line_number":58,"context_line":"  - The molds feature is deprecated and scheduled for removal."}],"source_content_type":"text/x-yaml","patch_set":5,"id":"0b6e088a_f77c6209","line":58,"in_reply_to":"8eda8fcf_85186e01","updated":"2026-05-04 19:57:26.000000000","message":"Acknowledged","commit_id":"422b7ee685f64b98bcdfd02fa1f94e0c451412f5"}],"ossa/OSSA-2026-010.yaml":[{"author":{"_account_id":11655,"name":"Julia Kreger","email":"juliaashleykreger@gmail.com","username":"jkreger","status":"Flying to the moon with a Jetpack!"},"change_message_id":"e87c52e2b4f9e5a021144ac1c4a92a937156035b","unresolved":true,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"description: \u003e"},{"line_number":8,"context_line":"  Dmitry Tantsur and Tuomo Tanskanen from the Metal3.io Security Team reported"},{"line_number":9,"context_line":"  a vulnerability in Ironic\u0027s image import code for idrac. When importing an"},{"line_number":10,"context_line":"  image, a user invoking molds can request authorization to be sent to a remote"},{"line_number":11,"context_line":"  endpoint. The credential forwarded is a time-limited Keystone token (which"},{"line_number":12,"context_line":"  provides access to all OpenStack services Ironic is authorized for); or"}],"source_content_type":"text/x-yaml","patch_set":6,"id":"701597eb_fe686bcf","line":9,"range":{"start_line":9,"start_character":29,"end_line":9,"end_character":36},"updated":"2026-05-05 14:30:14.000000000","message":"Not an actual image, a configuration, a \"mold\" of bios configuration.","commit_id":"d901cffb355c7aeab2f7a3b7b3edf2d2e08eb732"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"7387822f1bf4dbda9f12203ab9923aebc0ff000a","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"description: \u003e"},{"line_number":8,"context_line":"  Dmitry Tantsur and Tuomo Tanskanen from the Metal3.io Security Team reported"},{"line_number":9,"context_line":"  a vulnerability in Ironic\u0027s image import code for idrac. When importing an"},{"line_number":10,"context_line":"  image, a user invoking molds can request authorization to be sent to a remote"},{"line_number":11,"context_line":"  endpoint. The credential forwarded is a time-limited Keystone token (which"},{"line_number":12,"context_line":"  provides access to all OpenStack services Ironic is authorized for); or"}],"source_content_type":"text/x-yaml","patch_set":6,"id":"05c5948e_3bae41f7","line":9,"range":{"start_line":9,"start_character":29,"end_line":9,"end_character":36},"in_reply_to":"701597eb_fe686bcf","updated":"2026-05-05 15:02:16.000000000","message":"Done","commit_id":"d901cffb355c7aeab2f7a3b7b3edf2d2e08eb732"},{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"27edf8f8612b3cef07b52b3af084156e78208c79","unresolved":true,"context_lines":[{"line_number":54,"context_line":"    - https://review.opendev.org/c/openstack/ironic/+/986817"},{"line_number":55,"context_line":""},{"line_number":56,"context_line":"notes:"},{"line_number":57,"context_line":"  - The molds feature was deprecated and removed from the current development"},{"line_number":58,"context_line":"    branch."}],"source_content_type":"text/x-yaml","patch_set":6,"id":"387a24e3_59517dae","line":58,"range":{"start_line":57,"start_character":49,"end_line":58,"end_character":11},"updated":"2026-05-04 20:42:11.000000000","message":"might be worth saying \"during the Hibiscus development cycle\" to be completely clear","commit_id":"d901cffb355c7aeab2f7a3b7b3edf2d2e08eb732"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"c1f7270749b80f25ed211bd15766dccad0b12d61","unresolved":true,"context_lines":[{"line_number":54,"context_line":"    - https://review.opendev.org/c/openstack/ironic/+/986817"},{"line_number":55,"context_line":""},{"line_number":56,"context_line":"notes:"},{"line_number":57,"context_line":"  - The molds feature was deprecated and removed from the current development"},{"line_number":58,"context_line":"    branch."}],"source_content_type":"text/x-yaml","patch_set":6,"id":"bed96248_019eefea","line":58,"range":{"start_line":57,"start_character":49,"end_line":58,"end_character":11},"in_reply_to":"387a24e3_59517dae","updated":"2026-05-04 21:14:27.000000000","message":"ack, this does lead to the question about when it was deprecated?","commit_id":"d901cffb355c7aeab2f7a3b7b3edf2d2e08eb732"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"e6772a11669baed006996070d36254448378d686","unresolved":true,"context_lines":[{"line_number":54,"context_line":"    - https://review.opendev.org/c/openstack/ironic/+/986817"},{"line_number":55,"context_line":""},{"line_number":56,"context_line":"notes:"},{"line_number":57,"context_line":"  - The molds feature was deprecated and removed from the current development"},{"line_number":58,"context_line":"    branch."}],"source_content_type":"text/x-yaml","patch_set":6,"id":"87528539_166c2a2c","line":58,"range":{"start_line":57,"start_character":49,"end_line":58,"end_character":11},"in_reply_to":"474a028d_6a3b54de","updated":"2026-05-04 22:41:32.000000000","message":"LGTM!","commit_id":"d901cffb355c7aeab2f7a3b7b3edf2d2e08eb732"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"7387822f1bf4dbda9f12203ab9923aebc0ff000a","unresolved":false,"context_lines":[{"line_number":54,"context_line":"    - https://review.opendev.org/c/openstack/ironic/+/986817"},{"line_number":55,"context_line":""},{"line_number":56,"context_line":"notes:"},{"line_number":57,"context_line":"  - The molds feature was deprecated and removed from the current development"},{"line_number":58,"context_line":"    branch."}],"source_content_type":"text/x-yaml","patch_set":6,"id":"0e5d24be_b97f1a23","line":58,"range":{"start_line":57,"start_character":49,"end_line":58,"end_character":11},"in_reply_to":"87528539_166c2a2c","updated":"2026-05-05 15:02:16.000000000","message":"Done","commit_id":"d901cffb355c7aeab2f7a3b7b3edf2d2e08eb732"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"171c7bc0d75aec1a73a8aeba7c618ec1f7273462","unresolved":true,"context_lines":[{"line_number":54,"context_line":"    - https://review.opendev.org/c/openstack/ironic/+/986817"},{"line_number":55,"context_line":""},{"line_number":56,"context_line":"notes:"},{"line_number":57,"context_line":"  - The molds feature was deprecated and removed from the current development"},{"line_number":58,"context_line":"    branch."}],"source_content_type":"text/x-yaml","patch_set":6,"id":"ec9626b4_4aee8c37","line":58,"range":{"start_line":57,"start_character":49,"end_line":58,"end_character":11},"in_reply_to":"bed96248_019eefea","updated":"2026-05-04 22:15:56.000000000","message":"We marked molds as deprecated in the 2024.1 release -- so over 2 years ago. (source: commit message here -\u003e https://review.opendev.org/c/openstack/ironic/+/986703 so this is secondary sourced info)","commit_id":"d901cffb355c7aeab2f7a3b7b3edf2d2e08eb732"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"8fc880b4651fa611f881edbc4d16e6170e1476a0","unresolved":true,"context_lines":[{"line_number":54,"context_line":"    - https://review.opendev.org/c/openstack/ironic/+/986817"},{"line_number":55,"context_line":""},{"line_number":56,"context_line":"notes:"},{"line_number":57,"context_line":"  - The molds feature was deprecated and removed from the current development"},{"line_number":58,"context_line":"    branch."}],"source_content_type":"text/x-yaml","patch_set":6,"id":"474a028d_6a3b54de","line":58,"range":{"start_line":57,"start_character":49,"end_line":58,"end_character":11},"in_reply_to":"ec9626b4_4aee8c37","updated":"2026-05-04 22:16:51.000000000","message":"To form a whole thought; would all of us be happy with:\n\nThe molds feature was deprecated in the 2024.1 release and has been removed in the Hibiscus (2026.2) release.","commit_id":"d901cffb355c7aeab2f7a3b7b3edf2d2e08eb732"},{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"6d96e2869334d3cf2e9ae8b4cc50e85a412650ac","unresolved":true,"context_lines":[{"line_number":56,"context_line":""},{"line_number":57,"context_line":"notes:"},{"line_number":58,"context_line":"  - The molds feature was deprecated in the 2024.1 (Caracal) release,"},{"line_number":59,"context_line":"    and is removed from the current development branch."},{"line_number":60,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":7,"id":"a4987b8f_92046325","line":59,"updated":"2026-05-05 15:17:53.000000000","message":"I like better what you had suggested in a comment on PS 6 because it explicitly mentions hibiscus:\n\nThe molds feature was deprecated in the 2024.1 release and has been removed in the Hibiscus (2026.2) release.\n\nor, if you prefer the current development branch language,\n\nThe molds feature was deprecated in the 2024.1 (Caracal) release and has been removed during development of the 2026.2 (Hibiscus) release.","commit_id":"7245fcb9045b16ba64c9a6bc3dc5743686a5fd64"},{"author":{"_account_id":36770,"name":"cid","display_name":"cid","email":"cid@gr-oss.io","username":"cidelight","status":"@gr-oss upstream: Doing good IRONIC things..."},"change_message_id":"a56cec46865f858f3e3d7739f0921a0be83eeddb","unresolved":false,"context_lines":[{"line_number":56,"context_line":""},{"line_number":57,"context_line":"notes:"},{"line_number":58,"context_line":"  - The molds feature was deprecated in the 2024.1 (Caracal) release,"},{"line_number":59,"context_line":"    and is removed from the current development branch."},{"line_number":60,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":7,"id":"864ea043_4fc527bc","line":59,"in_reply_to":"a4987b8f_92046325","updated":"2026-05-05 15:45:18.000000000","message":"Acknowledged","commit_id":"7245fcb9045b16ba64c9a6bc3dc5743686a5fd64"},{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"6d96e2869334d3cf2e9ae8b4cc50e85a412650ac","unresolved":true,"context_lines":[{"line_number":57,"context_line":"notes:"},{"line_number":58,"context_line":"  - The molds feature was deprecated in the 2024.1 (Caracal) release,"},{"line_number":59,"context_line":"    and is removed from the current development branch."},{"line_number":60,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":7,"id":"d7e2c4fa_43e2dddf","line":60,"updated":"2026-05-05 15:17:53.000000000","message":"extraneous blank line","commit_id":"7245fcb9045b16ba64c9a6bc3dc5743686a5fd64"},{"author":{"_account_id":36770,"name":"cid","display_name":"cid","email":"cid@gr-oss.io","username":"cidelight","status":"@gr-oss upstream: Doing good IRONIC things..."},"change_message_id":"a56cec46865f858f3e3d7739f0921a0be83eeddb","unresolved":false,"context_lines":[{"line_number":57,"context_line":"notes:"},{"line_number":58,"context_line":"  - The molds feature was deprecated in the 2024.1 (Caracal) release,"},{"line_number":59,"context_line":"    and is removed from the current development branch."},{"line_number":60,"context_line":""}],"source_content_type":"text/x-yaml","patch_set":7,"id":"2ddfc322_9e8397f0","line":60,"in_reply_to":"d7e2c4fa_43e2dddf","updated":"2026-05-05 15:45:18.000000000","message":"Acknowledged","commit_id":"7245fcb9045b16ba64c9a6bc3dc5743686a5fd64"}]}