)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":8064,"name":"Jake Yip","email":"jake.yip@ardc.edu.au","username":"jake"},"change_message_id":"4c78eee08c53dad996c4bbe791fda6d6f2ce1a85","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":3,"id":"45a9770b_a6ed847a","updated":"2026-11-04 05:18:24.000000000","message":"Thanks all for working on this! much appreciated","commit_id":"e2ec013753b8ce70aad2f9e46eb94b6e9c0e0b28"},{"author":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},"change_message_id":"d38fece3a2d9e6124f3c5fd5c2a4f4cb76908afa","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":3,"id":"206fe8e5_86310d3d","updated":"2026-11-02 10:02:18.000000000","message":"thanks for the updates! I\u0027ve missed this on Friday :S so let\u0027s merge this now ASAP","commit_id":"e2ec013753b8ce70aad2f9e46eb94b6e9c0e0b28"}],"deliverables/epoxy/keystonemiddleware.yaml":[{"author":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},"change_message_id":"2d31802fce1101d0e9e6439bd36602846692e3a6","unresolved":false,"context_lines":[{"line_number":22,"context_line":"  - version: 10.9.2"},{"line_number":23,"context_line":"    projects:"},{"line_number":24,"context_line":"      - repo: openstack/keystonemiddleware"},{"line_number":25,"context_line":"        hash: a89abb6436657e8f076410e19b8450702c62598e"},{"line_number":26,"context_line":"branches:"},{"line_number":27,"context_line":"  - name: stable/2025.1"},{"line_number":28,"context_line":"    location: 10.9.0"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"cf177c91_b9602d95","line":25,"updated":"2026-10-30 15:06:01.000000000","message":"In my opinion `Change service_token_roles_required default config` would require at least MINOR version bump, but we don\u0027t have room for that bump, so this is OK (other option would be in the future, to not change default value, rather leave it to operators to set it as True... given this is a CVE fix, i think we should not block on this...)","commit_id":"0ae5826d7acdb58ad4b0becb3d991c6c1ae4628a"}],"deliverables/flamingo/keystonemiddleware.yaml":[{"author":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},"change_message_id":"2d31802fce1101d0e9e6439bd36602846692e3a6","unresolved":true,"context_lines":[{"line_number":26,"context_line":"  - version: 10.12.2"},{"line_number":27,"context_line":"    projects:"},{"line_number":28,"context_line":"      - repo: openstack/keystonemiddleware"},{"line_number":29,"context_line":"        hash: 21e4a15ea570ea350fdc38fca58fc9138465a24e"},{"line_number":30,"context_line":"branches:"},{"line_number":31,"context_line":"  - name: stable/2025.2"},{"line_number":32,"context_line":"    location: 10.12.0"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"c9278528_5962d390","line":29,"updated":"2026-10-30 15:06:01.000000000","message":"In my opinion `Change service_token_roles_required default config` would require at least MINOR version bump, what do you think?","commit_id":"0ae5826d7acdb58ad4b0becb3d991c6c1ae4628a"},{"author":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},"change_message_id":"d45ef6e19d1562ef8c7c89b1c77a66c2e2d574a8","unresolved":false,"context_lines":[{"line_number":26,"context_line":"  - version: 10.12.2"},{"line_number":27,"context_line":"    projects:"},{"line_number":28,"context_line":"      - repo: openstack/keystonemiddleware"},{"line_number":29,"context_line":"        hash: 21e4a15ea570ea350fdc38fca58fc9138465a24e"},{"line_number":30,"context_line":"branches:"},{"line_number":31,"context_line":"  - name: stable/2025.2"},{"line_number":32,"context_line":"    location: 10.12.0"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"739743be_eacd5938","line":29,"in_reply_to":"c9278528_5962d390","updated":"2026-10-30 18:12:05.000000000","message":"Done","commit_id":"0ae5826d7acdb58ad4b0becb3d991c6c1ae4628a"}],"deliverables/gazpacho/keystonemiddleware.yaml":[{"author":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},"change_message_id":"2d31802fce1101d0e9e6439bd36602846692e3a6","unresolved":true,"context_lines":[{"line_number":18,"context_line":"  - version: 12.0.1"},{"line_number":19,"context_line":"    projects:"},{"line_number":20,"context_line":"      - repo: openstack/keystonemiddleware"},{"line_number":21,"context_line":"        hash: 2be12800c0e8dd9931676b31a8ca43218c67373e"},{"line_number":22,"context_line":"branches:"},{"line_number":23,"context_line":"  - name: stable/2026.1"},{"line_number":24,"context_line":"    location: 12.0.0"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"f38fa3ee_89fc5743","line":21,"updated":"2026-10-30 15:06:01.000000000","message":"In my opinion `Change service_token_roles_required default config` would require at least MINOR version bump, what do you think?","commit_id":"0ae5826d7acdb58ad4b0becb3d991c6c1ae4628a"},{"author":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},"change_message_id":"d45ef6e19d1562ef8c7c89b1c77a66c2e2d574a8","unresolved":false,"context_lines":[{"line_number":18,"context_line":"  - version: 12.0.1"},{"line_number":19,"context_line":"    projects:"},{"line_number":20,"context_line":"      - repo: openstack/keystonemiddleware"},{"line_number":21,"context_line":"        hash: 2be12800c0e8dd9931676b31a8ca43218c67373e"},{"line_number":22,"context_line":"branches:"},{"line_number":23,"context_line":"  - name: stable/2026.1"},{"line_number":24,"context_line":"    location: 12.0.0"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"9c529208_29eac36b","line":21,"in_reply_to":"f38fa3ee_89fc5743","updated":"2026-10-30 18:12:05.000000000","message":"Done","commit_id":"0ae5826d7acdb58ad4b0becb3d991c6c1ae4628a"},{"author":{"_account_id":8064,"name":"Jake Yip","email":"jake.yip@ardc.edu.au","username":"jake"},"change_message_id":"fa503d35d7f88b9f8d9fef00837c868689e1cf56","unresolved":true,"context_lines":[{"line_number":15,"context_line":"    projects:"},{"line_number":16,"context_line":"      - repo: openstack/keystonemiddleware"},{"line_number":17,"context_line":"        hash: fe744ab96ff7df113b0f3ddbae6eb15bb37d1325"},{"line_number":18,"context_line":"  - version: 12.1.0"},{"line_number":19,"context_line":"    projects:"},{"line_number":20,"context_line":"      - repo: openstack/keystonemiddleware"},{"line_number":21,"context_line":"        hash: 2be12800c0e8dd9931676b31a8ca43218c67373e"}],"source_content_type":"text/x-yaml","patch_set":3,"id":"d7c5b5a2_1e7459ef","line":18,"range":{"start_line":18,"start_character":13,"end_line":18,"end_character":19},"updated":"2026-10-31 23:32:08.000000000","message":"Just a note that if the version bump change from PATCH to MINOR, CVE [1] may need to be updated. E.g. CVE says \u0027before 12.0.1\u0027 which is technically right, but there is no 12.0.1 version to update to ;) \n\n[1] https://www.cve.org/CVERecord?id\u003dCVE-2026-115642","commit_id":"e2ec013753b8ce70aad2f9e46eb94b6e9c0e0b28"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"e1839103ec5c62dfc89243d227b83cc93f0c422b","unresolved":false,"context_lines":[{"line_number":15,"context_line":"    projects:"},{"line_number":16,"context_line":"      - repo: openstack/keystonemiddleware"},{"line_number":17,"context_line":"        hash: fe744ab96ff7df113b0f3ddbae6eb15bb37d1325"},{"line_number":18,"context_line":"  - version: 12.1.0"},{"line_number":19,"context_line":"    projects:"},{"line_number":20,"context_line":"      - repo: openstack/keystonemiddleware"},{"line_number":21,"context_line":"        hash: 2be12800c0e8dd9931676b31a8ca43218c67373e"}],"source_content_type":"text/x-yaml","patch_set":3,"id":"1277974c_d8926f2b","line":18,"in_reply_to":"d7c5b5a2_1e7459ef","updated":"2026-11-01 13:51:19.000000000","message":"This is precisely why we use ranges or list precise affected versions, because we can\u0027t predict at time of advisory publication what the next version on a branch will be, only what it *can\u0027t* be. The lack of a version matching the bound on a range is fine as long as the actual existing versions fall within the intended ranges.","commit_id":"e2ec013753b8ce70aad2f9e46eb94b6e9c0e0b28"},{"author":{"_account_id":5263,"name":"Jeremy Stanley","display_name":"fungi","email":"fungi@yuggoth.org","username":"fungi","status":"missing, presumed fed"},"change_message_id":"261f6b55b3f7198c4bb759cde91fdd970085239b","unresolved":false,"context_lines":[{"line_number":15,"context_line":"    projects:"},{"line_number":16,"context_line":"      - repo: openstack/keystonemiddleware"},{"line_number":17,"context_line":"        hash: fe744ab96ff7df113b0f3ddbae6eb15bb37d1325"},{"line_number":18,"context_line":"  - version: 12.1.0"},{"line_number":19,"context_line":"    projects:"},{"line_number":20,"context_line":"      - repo: openstack/keystonemiddleware"},{"line_number":21,"context_line":"        hash: 2be12800c0e8dd9931676b31a8ca43218c67373e"}],"source_content_type":"text/x-yaml","patch_set":3,"id":"ed412412_f5f070f1","line":18,"in_reply_to":"d7c5b5a2_1e7459ef","updated":"2026-11-01 13:50:46.000000000","message":"This is precisely why we use ranges or list precise affected versions, because we can\u0027t predict at time of advisory publication what the next version on a branch will be, only what it *can\u0027t* be. The lack of a version matching the bound on a range is fine as long as the actual existing versions fall within the intended ranges.","commit_id":"e2ec013753b8ce70aad2f9e46eb94b6e9c0e0b28"}],"deliverables/hibiscus/keystonemiddleware.yaml":[{"author":{"_account_id":17685,"name":"Elod Illes","email":"elod.illes@est.tech","username":"elod.illes"},"change_message_id":"d45ef6e19d1562ef8c7c89b1c77a66c2e2d574a8","unresolved":true,"context_lines":[{"line_number":18,"context_line":"  - version: 13.1.0"},{"line_number":19,"context_line":"    projects:"},{"line_number":20,"context_line":"      - repo: openstack/keystonemiddleware"},{"line_number":21,"context_line":"        hash: 5042f7b2bd830321abd729dbd299666d87ce1a73"},{"line_number":22,"context_line":"branches:"},{"line_number":23,"context_line":"  - name: stable/2026.2"},{"line_number":24,"context_line":"    location: 13.0.1"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"5b248e1a_efbd6524","line":21,"updated":"2026-10-30 18:12:05.000000000","message":"actually, hibiscus does not have that patch [1] that changes config default value, so if i\u0027m not wrong, then 13.0.2 is enough here 😇\n\n[1] https://zuul.opendev.org/t/openstack/build/7c1fef7e16af4037ab853c6c13952ecb/log/tox/list-changes/list-changes-results.log#1807","commit_id":"19ec03e13529f7c9865abb28a5b554a30ab21303"}]}