)]}'
{
  "commit": "289816b5bd432d6fa0fc65c2ca686ea6f3ae0258",
  "tree": "c89c1c38c009f0893b8b1a58f80b75b8935dda49",
  "parents": [
    "c3a647653b9520cbc819c7760bb684d22c968a53"
  ],
  "author": {
    "name": "David Ostrovsky",
    "email": "david@ostrovsky.org",
    "time": "Thu Dec 27 21:14:28 2018 +0100"
  },
  "committer": {
    "name": "David Pursehouse",
    "email": "dpursehouse@collab.net",
    "time": "Fri Jan 11 09:12:27 2019 +0900"
  },
  "message": "Upgrade JGit to 4.9.8.201812241815-r\n\nThis release fixes an issue where AdvertiseRefsHook was not called for\ngit-upload-pack in protocol v0 bidirectional transports, meaning that\nwants aren\u0027t validated and a user can fetch anything that is pointed\nto by any ref (using fetch-by-sha1), as long as they can guess the\nobject name.\n\nBug: Issue 10262\nChange-Id: I169fbc742a4edffdf52e6b8ef71b7cd618affa95\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "0bef32737cbe89827b9dd1bd327fc89c56e71577",
      "old_mode": 33188,
      "old_path": "lib/jgit/jgit.bzl",
      "new_id": "4597fd721ff9fcaccb707afdb04bab8d3c455508",
      "new_mode": 33188,
      "new_path": "lib/jgit/jgit.bzl"
    }
  ]
}