)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"df0458c07f7e2f72f086df18db06a95f5ddc7009","unresolved":true,"context_lines":[{"line_number":4,"context_line":"Commit:     mitya-eremeev-2 \u003cmitossvyaz@mail.ru\u003e"},{"line_number":5,"context_line":"CommitDate: 2022-11-07 13:20:10 +0000"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"[CVE-2022-42969] Do not use package py"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Some weird CVE was found in package py."},{"line_number":10,"context_line":"Pytest does not use py since 7.2.0."}],"source_content_type":"text/x-gerrit-commit-message","patch_set":3,"id":"f20e4c72_3694730f","line":7,"updated":"2022-11-07 15:06:54.000000000","message":"IMO the CVE is not worth being mentioned in the commit message header, see the discussion in the related pytest issue. Also the header should state what is actually being changed, which is to bump to latest pytest version, nothing directly happning with py.","commit_id":"49e1d4adc969691a2b848ce9846d79c00885bc1f"},{"author":{"_account_id":32927,"name":"mitya-eremeev-2","display_name":"Mitya Eremeev","email":"mitossvyaz@mail.ru","username":"mitya-eremeev-2"},"change_message_id":"08e3afc8d6d16e024ffcbcf561b513524f0ea4d4","unresolved":true,"context_lines":[{"line_number":4,"context_line":"Commit:     mitya-eremeev-2 \u003cmitossvyaz@mail.ru\u003e"},{"line_number":5,"context_line":"CommitDate: 2022-11-07 13:20:10 +0000"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"[CVE-2022-42969] Do not use package py"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Some weird CVE was found in package py."},{"line_number":10,"context_line":"Pytest does not use py since 7.2.0."}],"source_content_type":"text/x-gerrit-commit-message","patch_set":3,"id":"6cc49aca_47934969","line":7,"in_reply_to":"f20e4c72_3694730f","updated":"2022-11-07 16:25:18.000000000","message":"The only reason we update pytest is to reduce py usage.\nWe reduce py usage because of CVE.\nI agree that CVE is not really \"real\" but package is in maintanence mode. It\u0027s better to avoid py than to fight for it.\nPytest bump can be seen from commit code.\nThe main content of commit message should be reasoning of commit and not describing code change.\nAlso We specify explicitly py version in new patchset.","commit_id":"49e1d4adc969691a2b848ce9846d79c00885bc1f"}],"/PATCHSET_LEVEL":[{"author":{"_account_id":13252,"name":"Dr. Jens Harbott","display_name":"Jens Harbott (frickler)","email":"frickler@offenerstapel.de","username":"jrosenboom"},"change_message_id":"df0458c07f7e2f72f086df18db06a95f5ddc7009","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":3,"id":"7102d601_46d49e04","updated":"2022-11-07 15:06:54.000000000","message":"The failing test shows that more work is needed on the horizon side in order for this to work.","commit_id":"49e1d4adc969691a2b848ce9846d79c00885bc1f"},{"author":{"_account_id":32927,"name":"mitya-eremeev-2","display_name":"Mitya Eremeev","email":"mitossvyaz@mail.ru","username":"mitya-eremeev-2"},"change_message_id":"08e3afc8d6d16e024ffcbcf561b513524f0ea4d4","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":3,"id":"2dfd4288_7d16cd92","in_reply_to":"7102d601_46d49e04","updated":"2022-11-07 16:25:18.000000000","message":"Already in progress..\n863101: [CVE-2022-42969] Py is not used by pytest anymore | https://review.opendev.org/c/openstack/horizon/+/863101","commit_id":"49e1d4adc969691a2b848ce9846d79c00885bc1f"}]}